Insider threat is the ‘weakest link' for businesses