Internal threat mitigation