INTERNAL THREATS
Internal threats are less common than external threats. However, internal threats have the potential to cause greater damage. Even though internal threats are more usually generated by disgruntled employees, other things such as a lack of documentation or processes, or the poor implementation of either of these, can also be a source of internal threats.
EXTERNAL THREATS
External threats are in a constant state of change. Various malicious programs and attack techniques are becoming notably more sophisticated and harder to detect. By charting the current information security status and improving any weaknesses that are found, companies can cut down on security-related losses and proactively prevent security problems from even occuring in the first place.