An organization is MOST at risk from a new worm being introduced through the intranet when:

desktop virus definition files are not up to date. 

system software does not undergo integrity checks. 

hosts have static IP addresses. 

executable code is run from inside the firewall.