Commentary: Most higher education institutions hold sensitive data, but don't have insider threat programs. Joanna Lyn Grama says they should.