Pitfalls of Ignoring Insider Threats in IT Security