On our big contract we regard the insider as the biggest threat to the system if for no other reason than the system is not connected to the internet. With that said, insiders are still a huge threat. Easily half the systems I looked at last week had a boot order that would allow a system to boot from some other media than the first HD. They could also be booted into the BIOS with PWs and had the order changed there. On top of all that, the insider has one thing the outsider doesn't, physical access. We'll see where this goes. Thanks for the news.

You would be surprised. If you are part of the program, you have pretty much unlimited physical access. With that said, the place is wired out the whazoo with video and other physical security implementations. Yes, the insider is a great threat, but it would be hard to get away with anything there.