Financial firms' own staff pose the greatest threat to security in the fight against fraud and other financial crime, according to new research.