That raises the risk of sensitive data exposure, unauthorized changes, and activity that is difficult to distinguish from the employee’s