In a recent survey conducted by Dimensional Research and commissioned by Preempt, 65% of respondents were concerned about stolen data and abuse of admin credentials.
91% of respondents said insiders have access to systems they shouldn't, and 70% said they're unable to monitor privileged user activities effectively."
STEALTHbits File Activity Monitor - Know Who Has Permissions to Every AD Object
Stand-Alone File Activity Monitoring
5 Challenges with Monitoring Windows File Activity