The insider nobody saw coming (and mostly doesn't exist)

Every time I ask a director about his biggest security concern, within five minutes I get the words "insider threat". He says it with a certain look — half paranoia, half heroism — as if he has just confessed that someone under his own roof might be working against him. And then he describes the image in his head. It is always the same image. The disgruntled employee who just got fired. The IT admin with a secret grudge. The sales manager on his way to the competitor who fills a USB stick with customer data. It is a scene from a Netflix series, not a scene from reality.