Yes, internal threats have always been a big problem -- but I think this is symptomatic of the scale of the threat, that dealing with it is now seen as a separate problem and a big enough one to be fodder for the shelves in J. Random Highstreet Bookshop.

(Datacrime, for all its excellence, wasn't exactly a sysadmin's detection toolkit, was it?)