How to manage and mitigate insider threats