Enterprises often see employees as their greatest vulnerability and as being victims of outside threats, but sometimes the latter is not true.