1. A method comprising: identifying a predetermined particular behavioral profile associated with at least one particular user of a computing system, the particular behavioral profile identifying expected behavior of the at least one user within the computing system; identifying, using at least one computer processing device, activities associated with use of the computing system by the particular user; and determining whether the identified activities correlate with the particular behavioral profile, wherein identifying an activity that deviates from the particular behavioral profile beyond a particular threshold triggers a risk event relating to the particular user.