The relationship manager hands in notice on a Thursday. Over the notice period, they quietly export the client book they’ve built for a decade to a personal Drive. A trader copies the pricing model to a USB stick the night before leaving drinks. None of it is malware. None of it trips a rule. It’s a valid user with valid access, doing something ordinary right up until it isn’t — and by the time IT and HR compare notes, the account is closed and the data is gone.

The session covered how insider risk actually shows up in financial institutions, why the riskiest moment is the weeks before someone leaves rather than the day they go, and how visibility into behaviour — not just content — closes the gap before the data walks.