Source: https://www2.deloitte.com/content/dam/Deloitte/us/Documents/public-sector/us-fed-twelve-considerations-to-mature-an-insider-threat-program.pdf