Threats to your enterprise have as much chance to come from around the globe as they do across the hall. This much is obvious to the savvy CISO. Your organization may have governance policies in place along with proper education on privacy and security within your organization, but is it possible that investment dollars are not entirely going where they belong? To what extent are organizations overlooking internal security threats? What kind of internal threats are most concerning, be they malicious or unintentional? And where should CISOs be refocusing their efforts? Kevin Novak will be speaking today at the SC Congress in Chicago on the topic "Security, Privacy and Whistleblowing".