Federal agencies have increased their focus on insider threats and Zero Trust. Yet, Insider Risk Management remains elusive for many agencies. To achieve Zero Trust, agencies must design security from the inside out, not just work toward threat prevention.