Businesses’ own employees are a bigger threat to the security of their data than external attackers, new research shows.