How to fight insider threats, and prevent data loss