A Risk Mitigation Model: Lessons Learned From Actual Insider Sabotage