How an ex-BofA CIO ferrets out insider threats