Risk Mitigation Strategies: Lessons Learned from Actual Insider Attacks