Who is an insider? It could be an employee or it could include vendors and contractors who have access to sensitive data.