Securing Against Insider Threats and Tribal ICS Knowledge