Check out my latest blog post on the Code42 blog about how insider risk is quite different from dealing with malware: Insider Risk vs Malware - How Security Should Manage These Threats - Code42