Cyber threats can come from both inside and outside an organization and are mitigated through the use of cybersecurity policies and tools.