What do 19th-century textile workers and today’s AI-disrupted employees have in common?

More than you might think.

In this episode, we explore the fascinating parallels between the Luddite movement and modern insider threats triggered by the rapid adoption of AI in the workplace.

Drawing from recent research and historical insights, we unpack how fear, uncertainty, and loss of control can fuel sabotage — and what organisations can do to prevent it.

Tune in to learn:

• Why AI can be a workplace stressor that triggers insider threats

• What employers can do to manage the human side of AI adoption

• How the Luddite legacy lives on — in today’s digital age

• Practical solutions for building trust, transparency, and resilience during digital transformation

Whether you are a security leader, HR professional, or tech policy thinker, this is a timely conversation you won’t want to miss.

In the workplace setting an employer provides money and / or other benefits to a person in exchange for their labour, knowledge, and time.  The relationship is formally set out in a contract which details obligations that fall upon both the employer and employee, contractor or volunteer – a principle known as quid pro quo.  Examples of obligations include an employer providing a safe workplace, an employee working to a required standard of quality and time, and both parties behaving in the workplace in accordance with stated organisational values and the common law.

When employees do not hold up their part of the quid pro quo bargain then trusted insiders can become insider threats and cause harm to the organisation.

In this podcast Pentagram Advisory looks at two recent insider threats in Australia - the 'Bankstown nurses' and soldier Kira Korolev. The cases are very different but both are examples of intentional insiders who caused significant harm, noting the final consequences of their actions are not clear at the time this podcast waa created.

In February 2025 the United States National Counterintelligence and Security Center (or NCSC) released a report titled Insider Threat Mitigation for U.S. Critical Infrastructure Entities – Guidelines from an Intelligence Perspective.  Pentagram Advisory is flagging this report with our followers because the report is equally valid for Australia’s critical infrastructure owners and operators, as defined by Australia’s Security of Critical Infrastructure Act 2018 (the SOCI Act) and linked legislation.  

The NCSC report can be read by Australian entities, whether they be critical infrastructure or other types of enterprises, as an up-to-date advice on the growing importance of the insider threat to Australia’s national security overall and to the critical infrastructure community in particular. 

When does a trusted employee become a risk? 

Insider threats do not emerge overnight—they are often the result of a gradual shift driven by workplace and personal factors.

While organisations focus on technical defences, they can overlook the human element: the psychosocial hazards that can turn loyal employees into potential insider threats. 

Join Pentagram Advisory as we discuss real-world case studies, including Jessica’s story - a trusted IT professional whose workplace experience led her down a dangerous path.

Learn how leadership, workplace culture, and proactive monitoring tools like Teamgage can help prevent disengagement, frustration, and ultimately, insider threats.

In an era of rising security threats, how do organisations ensure the integrity of the people entrusted with critical infrastructure?

From workforce screening to insider threat mitigation, the security of critical workers is paramount.

In this episode, we explore the Critical Worker Identification and Management Framework, a structured approach to identifying, vetting, and monitoring individuals who hold privileged access to essential assets and systems.

We break down:

✅ The importance of critical worker security under the Security of Critical Infrastructure Act (SOCI) 2018
✅ Best practices for workforce screening, ongoing suitability assessments, and risk-based categorisation
✅ The role of insider threat mitigation and third-party risk management
✅ How organisations can integrate security, governance, and risk management into workforce planning

Whether you're a security professional, risk manager, or leader responsible for safeguarding critical assets, this discussion will equip you with the knowledge and strategies to strengthen personnel security and enhance compliance.

Tune in now and take a proactive approach to protecting what matters most.

As geopolitical tensions rise and the Trump administration reshapes U.S. security policies, Australia faces increasing scrutiny over insider threats within its workforce and supply chains.

This episode, based on insights from Timothy Slattery, a former senior official in Australia's army, intelligence, and national security community, explores the national security implications of safeguarding critical infrastructure, defence industries, and intelligence sectors, particularly in the context of AUKUS and Australia’s role as a custodian of sensitive U.S. military technology.

We examine how insider threats—whether driven by ideology, economic pressures, or external influence—pose risks to both government and private sectors.

With new security requirements under the Security of Critical Infrastructure Act 2018, Australia must align its insider threat programs with evolving global security expectations.

Join Timothy Slattery from Pentagram Advisory as he navigates the challenges of workforce screening, risk mitigation, and compliance, ensuring that Australia remains a trusted security partner and protects national interest.

"The problem with collective responsibility is that it often leads to collective irresponsibility," said Michael Novak.

Nowhere is this more evident than in the way many organisations manage insider threats - fragmented across departments, lacking clear ownership, and often deprioritised.

In this episode, Marina Shteinberg and Timothy Slattery from Pentagram Advisory explore why insider threat programs frequently struggle without a dedicated home. They discuss the risks of disjointed responsibilities, the pitfalls of over-reliance on technology without human oversight, and the regulatory pressures facing critical infrastructure organisations under the Security of Critical Infrastructure Act 2018.

💡 So, what’s the solution?

Marina and Timothy make the case for a centralised insider threat management function—one that integrates security, HR, IT, and leadership to create a proactive, risk-based approach that balances technology with human behaviour analysis.

Tune in for practical insights on how organisations can build resilient insider threat programs that go beyond compliance and drive real security outcomes.

On 29 January 2025 the Commonwealth Government awarded a grant to CI-ISAC for it to establish and operate an Australian Health Cyber Sharing Network (HCSN) which will offer assistance to all entities in the health sector. Pentagram is a foundation partner to CI-ISAC in the establishment and delivery of the HCSN. CI-ISAC will deliver cyber threat intelligence (CTI) and related cyber security advice to HCSN members. Pentagram will offer HCSN members protective security education and advice on mitigating the insider threat, a threat that is relevant to cyber and all other hazard types set out in Australia's Security of Critical Infrastructure Act 2018. Listen in to learn about insider threat and how Pentagram helps health and other critical infrastructure sectors mitigate the risks posed by the insider threat.

Quantum science, especially quantum computing, presents both risks and opportunities. In this podcast Pentagram discusses how the threat that quantum is likely to pose to Australia's critical infrastructure might be mitigated by utilising the intent of Australia's Security or Critical Infrastructure Act 2018 (SOCI Act) and it's Critical Infrastructure Risk Management Program. Spoiler alert - sometimes the 'old ways' are the best!

Australia faces a critical shortage of psychologists, a challenge with profound consequences for mental health, national security, and workforce resilience. In this episode, we explore the growing demand for psychological expertise post-COVID, the impact of this shortage on workforce assurance, and the risks posed to national security and critical infrastructure.

Using real-world examples, such as the recent case of espionage in the Australian Defence Force, we discuss the importance of psychological insights in mitigating insider threats and ensuring organisational safety. Hear how tailored risk-based screening methodologies, like those developed by Pentagram Advisory, offer innovative solutions to fill the gap left by this pressing shortage.

Join us for an in-depth look at the intersection of psychology, security, and resilience, with practical insights for leaders navigating today’s complex risk landscape.

Tune in now to protect your most valuable assets – your people, data, and reputation.