When addressing insider challenges  the commercial enterprise should focus on managing the associated risks  taking into account the threats  related vulnerabilities  and affected assets A comprehensive insider risk program requires people  processes  and tools  acting collectively to achieve the greatest benefit and return on investment