Early lessons learned mitigating SolarWinds hack-style Insider Risk