It’s difficult to know in which to begin to deal with them all. It’s equally as challenging to know when to stop. Danger modeling can help. Insider threats pose a substantial hazard to businesses, still they don't seem to be accounted for in the standard cyber destroy chain approach. https://ieeexplore.ieee.org/document/9941250