Heading off insider risk in the hybrid workplace