A system dynamics model of an insider attack on an information system