在现实中,许多商家都将信息系统的安全保护重点放在了“外”上,而对“防内”的重视程度不够。但是,从目前已发生的计算机犯罪案件来看,有相当一部分是由单位内部员工所为,且由这些人实施的计算机犯罪给单位造成的损失往往比外部攻击更大、成功机会更高。为了使广大商家免受内部员工监守自盗的损失,本文通过对现实中的一则案例进行分析,以引导广大商家将本单位信息系统的安全保护重点从“防外”转到“内外兼防”上来 In reality, many businesses focus their information system security protection on the “outside” while not enough on “anti-inside.” However, from the computer crime cases that have occurred so far, a considerable part is committed by internal staff and the losses caused by computer crimes carried out by these people are often greater than external attacks and have a higher chance of success. In order to make the majority of businesses free from the internal staff to guard against theft losses, this paper analyzes a case in reality, in order to guide the majority of businesses will focus on the security protection of their information systems from “anti-foreign” to “internal and external”