5. Information systems need to be protected from both internal and external threats.

a) Explain the differences between an internal and an external threat to an ICT system. (4)

b) Discuss the methods that a company could take to combat the threats. (8)