However I don't think that internal/external is synonymous with local/remote.
Neither do I, the former is geographical/organisational whilst the latter deals with methodology/mechanism.

Point is I am referring to senior guys who are more "figurehead managers" than IT professionals. The kind of guys who buy security software to protect their jobs rather than their systems.