Managing insider risk means also managing the environmental factors that may cause them.