Inside vs. outside threats which one is bigger?

Now and then surveys come out trying to make the case for insider threat being bigger than outside threats. Unbiased data such as
reported incidents resulting in data breaches ( http://datalossdb.org/statistics
) still point out outside threats as greatest source of reported data
loss incidents: outside 64%, inside 31 %, 5% unknown. Knowing which one
is bigger fit the agenda of security vendors that would like to sell
security management technology to the enterprise. Risk management
awareness should drive organizations to prioritize external data loss
mitigation because of business impact, an external data loss costs more
in term of impact than internal loss, usually a factor of 3 or 4 (
600-800 $/external record, cite FTC data vs 200 $/ internal record cite
Ponemon Inst Survey).
Other resources:



http://taosecurity.blogspot.com/2009/05/insider-threat-myth-documen...





http://www.bankinfosecurity.com/articles.php?art_id=2146