Managing Insider Threats with Internal Monitoring