S36 Ep17: Tom Hardin - The Insider Threat Playbook: Reducing Risky Behaviour Before It Starts

In today’s episode, Steve sits down with Tom Hardin, aka Tipperx — best known for helping expose a massive Wall Street insider trading ring. Steve and Tom discuss early warning signs that an organization might be crossing ethical or legal lines, how to build an organizational culture that promotes openness and protects from insider threats, and how to get employees to buy into things like good cyber hygiene.

Key Takeaways:

The most underappreciated leadership skill is listening.
Compliance must never be an afterthought or just a check-box exercise.
Anybody has the potential to become an insider threat.

Tune in to hear more about:

The fraud triangle (4:10)
How cybersecurity leaders can build a culture that discourages insider risk (7:12)
Striking a balance between trust and control (15:12)

Standout Quotes:

“But you don't get people to speak up by telling them to speak up. You actually have to, if you're gonna tell them to do that, you have to listen up. So I always encourage leadership to work on their listening skills.” - Tom Hardin
“If you have a rule that a few people break, you have a people problem. If you have a rule that a lot of people are breaking, you have a rule problem.” - Tom Hardin
“You could be one decision away. Never feel like it couldn't be you. Just have a healthy paranoia when you're in situations and not to feel like that could never be me crossing a line, because that's when we're most susceptible to that.” - Tom Hardin

Read the transcript of this episode
Subscribe to the ISF Podcast wherever you listen to podcasts
Connect with us on LinkedIn and Twitter

From the Information Security Forum, the leading authority on cyber, information security, and risk management.

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(355)

355: Eric O'Neill – Hackers Don't Break In, They Log In: Trust as the New Perimeter

Today, Steve is joined by former FBI agent Eric O’Neill. Eric is a cyber security expert and author, but he’s probably most well-known as the man who brought down Peter Hanssen, a Russian spy who beca...

1 Sep 31min

354: SUMMER LISTENING: Emerging Threats for 2026

Today, Steve looks toward the horizon, at the threats and challenges that enterprises and business leaders will face in 2026 and beyond. He also gives advice on how everyone, from the board to the pra...

25 Aug 28min

353: SUMMER LISTENING: Rest After Stress: The Psychology of High Performance

Today, Steve speaks with Lauren Farina, psychotherapist and founder of Invited Psychotherapy & Coaching. Lauren and Steve discuss how wellness is becoming a bigger part of the workplace and how we can...

18 Aug 26min

352: SUMMER LISTENING: Geoff White – Ransomware Is a Business and It's Competing Against You

In today’s episode, we welcome another ISF veteran: journalist Geoff White. The last time Geoff was a guest on the podcast, it was 2024 and he had just released a book about how the tech industry laun...

11 Aug 28min

351: SUMMER LISTENING: Steve Durbin – How Quantum and Geopolitics Are Redefining Resilience

Today, Steve returns to Business Matters with Juliette Foster. In this conversation, Steve recaps 2025 in cyber and shares what he sees as the biggest risks heading into 2026. The two also discuss res...

4 Aug 27min

350: SUMMER LISTENING: Alex Bovee – Identity in the Age of Agentic AI

In this episode, Steve speaks with Alex Bovee, co-founder and CEO of C1, a technology company focused on identity security online. Steve and Alex discuss why identity still often is an afterthought wh...

28 Juli 23min

349: Steve Durbin – When Governments Shift: Reimagining UK Cyber Strategy and Business Resilience

Today, Steve returns to Business Matters with Juliette Foster. The United Kingdom has a new Prime Minister: Andy Burnham, and Steve speaks with Juliette from a cyber and business perspective about wha...

21 Juli 29min