Which common cases does the insurance cover? What uncommon cases does it not?

How do you protect against an insider attack?