It's not a small distinction. An organization deliberately trying to inject an asset into your company to do X or Y is a different problem to solve than an existing employee who was coopted. And the co opted case has a different problem in one motivated by gain vs one motivated by threats agains them.