Employees violating information security may pose security threats to enterprise networks.