Hi John,

Thank you for your comment and for reading the post. I completely agree. Insider threat is one of the biggest risk for *any* organization. Insider threat defense needs to be broad because of the physical and logical access to the organization’s systems and intimate knowledge of the organization itself. Patch management is certainly one of the biggest operational challenges and one that leads to many successful attacks/compromises.

Unfortunately, current solutions to the insider threat are largely reactive and tactical; they don't address the architectural and operational needs demanded by the overall nature of the problem. These solutions and mitigations should involve the full scope of enterprise architecture concerns, including people, processes, technology, and even facilities.

Thanks again!
Omar