About 75% of insider incidents involve nobody acting maliciously. Programmes built to detect grievance address a quarter of the problem.