Prevent and detect insider cyberattacks