Whether accidental or malicious, insider incidents can result in fraud, privacy abuses, IP theft, and other damage. It's difficult for security pros to detect this activity because insiders need privileged access to do their jobs. Also, as employees, they're entitled to privacy and due process, so security pros must handle these incidents with greater care. There should be an insider threat program to detect, investigate, and respond to them. This report helps security pros recruit and retain the most critical role of the program: the insider threat analyst.