When you think of a cyber-attack, what image comes to mind? A hacker in a dark room? Perhaps a rogue nation-state launching a digital assault? These threats dominate headlines and rightly so. But there's another, quieter risk sitting much closer to home: the insider threat. And more often than not, they’re not wearing hoodies or cracking firewalls. They’re former employees, forgotten credentials, and outdated access policies; vulnerabilities created not out…