1. A computer-readable medium comprising computer-executable instructions that when executed by a processor perform a method comprising: transmitting electronic signals configured to display a ranking of plurality of user accounts that represent a threat to an organization, wherein the ranking is determined by monitoring values of at least four controls for each of the plurality of user accounts over a first time period, wherein the controls are selected from the group consisting of: a quantity of bandwidth utilized by a user account over a first network; blocked transmissions by a user account over the first network; blocked communication through a targeted communication application; non-blocked communication through the targeted communication application that violates at least one predefined criterion; an association of at least one security application with the user account, wherein if a at least one software application is associated with the user account, then: monitoring illegal storage attempts; and recording a filename associated with illegal storage attempts; and determining if communications through the first network are transmitted or received through an unauthorized protocol; comparing the values of the at least four controls over the first time period with values of the at least four controls over a second time period; and transmitting electronic signals configured to display a ranking of plurality of user accounts.