For years, cybersecurity strategies have largely focused on external threats: ransomware, phishing, vulnerability exploitation or supply chain attacks. However, there is a risk that continues to grow inside organisations, often without malicious intent, without visible alerts and without going through normal security processes. That risk…