From a 2006 CERT study - 6 signs of potential security issues from the inside of your IT organization: Problem children, organizational disruption, bad attitudes, insecure systems, dicey downloads, and missing locks - if you know of any of these - take a closer look.
