External threats are limited to what access they can get from outside your company's data network. ... Internal threats have varying levels of access based on privilege level but generally have access to basic network resources through legitimate log-in information.