“The biggest cybersecurity threat to a company is internal, such as a compromised employee account or a malicious hire, rather than external attacks.”