The insider threat – what to do if the problem is at the top?

Some leaders might be a joy to work for, others...not so much. How do you monitor a CEO who "knows it all" and dislikes having to comply with the security rules?