t to identify weaknesses that leave the organization vulnerable to attacks. Auditors might identify out-of-date software that needs to be patched, or they might find unauthorized wireless devices. Most security software and hardware products and services offer software that generates audit trails. These printouts and software records display indications of secu- rity breaches. Paying attention to them is an aid to identifying network weaknesses. In IT departments with large workloads, this does not always happen. Intentional and Inadvertent Security Breaches by Insiders The Verizon 2010 Data Breach Investigations Report, conducted in collaboration with the United States Secret Service, found that in 2009, insiders were responsible for 49 percent of breaches. In particular, employees who have been fired or those who feel entitled to access information are frequent causes of these incidents. An employee with high-level authorization to sensitive data can copy it or corrupt it in some way. The employee might then provide the sensitive data to competitors or cyber criminals. The Internet Employees who change jobs are often in the position to copy entire files and use them in their new positions. They might use information such as lists of customers to help them succeed in their new job. In other instances, employees inadvertently open infected e-mail attachments. They might unknowingly insert infected storage devices such as USB flash drives into network-connected computers. These viruses can then spread through a corporate net- work. To prevent this from happening, organizations often purchase security software that automatically screens e-mail attachments, laptops, and external devices for known malware. They can also install software that prevents USB devices from being inserted into LAN-connected computers. Other inadvertent security lapses caused by insiders include lost laptops, smart- phones, tablet computers, backup disks, and flash drives with files such as medical and demographic patient data or other priva