Contracted third parties and other insiders create a bevy of risks for companies looking to secure data.