Insider Threats: Root Causes and Mitigation Practices