A majority of attacks come from insiders people who have direct access to a company’s computer system as part of their job function or a business relationship Who is considered an insider?