A former Chief Privacy Officer to the U.S. Department of Homeland Security shares insights on managing insider risk.