Most companies think of insider threat as a cybersecurity problem.

That is too narrow.

An insider threat is any situation where a current or former employee, contractor, or business partner uses authorized access or knowledge of the organization to harm it. CISA defines it broadly that way and notes the harm can include sabotage, fraud, theft, workplace violence, or theft of sensitive information.