Score insider threat risk from behavioral and contextual indicators — termination, unusual access, downloads.