My internship manager wants me to audit our SaaS platform for rogue employee access how do I manage insider threats effectively without annoying the devs