Report: Little being done to combat insider threats