Time magazine’s cover story is about how people are scared of very, very unlikely things such as bird flu which hasn’t killed anyone in the US while the regular flu kills tens of thousands each year.

Security is the same way.  I often see organizations worrying about “Carlos the mad hacker” when their own IT staff might be the real threat.