The insider threat is real, but it's not often the pervasive enemy. Many times, by empowering our users instead of making direct attempts to make things harder

The insider threat is real, but it's not often the pervasive enemy. Many times, by empowering our users instead of making direct attempts to make things harder to use, we help the insiders -- our friends and peers at the office -- make better security decisions on their own. The moment they have to start working around our security solutions is the moment they go from being a good steward to doing things that may cause accidental data loss. We give our users access to the things they need to do their jobs. We really ought to trust them with that access and not make things harder than they must be.