Despite efforts to counter external threats, insider threats and online fraud have emerged as the leading dangers.