Focusing on Firewalls or internal Policies and employee behaviour?

Surveys show that 60 percent of security breaches are internal, but 70 percent of people are worried about hackers on the outside. Some companies even spend 90 percent of their security efforts only on firewalls. However, time and money should be used more effectively to protect the host as well as the network perimeter.