“The top two insider risks, according to respondents, are a data breach caused by a careless or negligent employee who exposes sensitive information or succumbs to a targeted phishing attack.”