Companies are going to have to do something to [know] what employees are doing if they want any chance of dealing with insider threats.

The solution is looking for patterns. It looks at a group to find out what it's doing and find out who's doing something different.