The Ontic Connected Intelligence Podcast

The topic of mental health in the security profession has been pushed aside for decades, but with the emergence of open-minded and forward-thinking younger generations, this crucial topic is increasingly finding its place in the spotlight. Not only is it important to take care of others to build a positive, empathic culture, but it also can decrease turnover and reduce costs to the business, having a positive effect on how assets are protected.

John Rodriguez is an expert on this topic and brings 41+ years of pure corporate security experience working for major corporations including General Motors, Kimberly-Clark, Levi Strauss & Co., and Cardinal Health. He is the founder of Empathic Security Cultures, LLC, based in Austin, Texas. Rodriguez is a security generalist with a passion for security culture development, coaching, and mental health for a psychologically safe workplace and mitigating hostile environment risks. 

Key topics of Rodriguez’s discussion with host Fred Burton include:

• Insights on how the mental health needs of security practitioners (and employees as a whole) have evolved since the pandemic
• Why connecting with people and building a culture of empathy is strongly tied to turnover and the success of a business.
• Advice for teams on building a successful security culture within an organization.

When a company experiences such immense growth that the name becomes synonymous with video conferencing, the importance of security measures increases accordingly. Nathan Mills joins the podcast to discuss the risks that come along with protecting people and assets for one of the most visible, evolving companies in the world.

As an Electrical Engineer with an MS in Strategic Intelligence and Project Management credentials, Mills spent the past 20 years developing, implementing, managing, and innovating enterprise risk management frameworks. He has extensive international experience as a Foreign Service Officer (Security Engineering Officer) in the U.S. Department of State's Bureau of Diplomatic Security and as the Director of Security Risk and Crisis Management at General Electric before his current role of Head of Global Security (CSO - Physical) at Zoom. 

Key topics of Mills’ discussion with host Fred Burton include:

• Why the risk profile of a dynamic, highly visible product differs from a company with a more established line of business.
• How Mills structures his security program and the strategies he leverages to be more efficient.
• Advice for security teams who lead operations on a global scale and the top three things they should focus on.

Key takeaways:

08:29: Fred: You're working in an industry and a company that has become almost like the word Google. And you think of the success over the pandemic and how you provide such a vital business continuity resource to the private sector.

09:00: Nathan Mills: Completely. Yeah, it's it's very interesting to work for a company that has become a verb and there's a lot of unique risks that come with that. In regards to the growth stage of an IPO and being new and having a lot of attention, that risk profile is very different than the ‘okay now you're established.’ You've been built people are using your products you have a market. Now you're in different places in the world. Now you have people traveling a lot more and now you have an expanding portfolio of products. How does the physical security element come into play and help educate the executives and other people who are maybe not familiar with a mature physical security organization? 

13:29: Fred: What advice do you have for security teams who lead operations on a global scale?

14:12: Nathan Mills: One of the things that I've learned is how do you do more with less and I think that's obviously a tired cliche, but leveraging the relationships is something that I think a lot of practitioners might overlook. The ability for me to get it in front of the right people at the right time to be able to influence change is the hardest part about it. So as I was building the program the one thing I constantly talked about with my team was building relationships with intentionality knowing who your stakeholders are within our groups and reaching out to them to build a cadence and learn more about them.

Unfortunately in today’s threat landscape, a Google search - even a few pages deep - won’t capture nearly enough information to grasp the risk a company faces.  That’s why Welton Chang, Co-Founder and CEO of Pyrra Technologies, set it upon himself to go after the content on fringe sites because of the threats that continue to emerge out of these nearly unmoderated social conversations.

Pyrra Technologies is a threat intelligence company that scans unmoderated social media with AI. Most recently Chang was the first Chief Technology Officer at Human Rights First and founded HRF's Innovation Lab. Prior to joining HRF, he was a senior researcher at the Johns Hopkins Applied Physics Laboratory where he led teams and developed technical solutions to address disinformation and online propaganda. 

Key topics of Chang’s discussion with host Fred Burton include:

• Inspiration behind developing Pyrra Technologies and his research on disinformation and online propaganda. 
• Challenges emerging from generative AI that corporate security will face in 2024 
• Advice for corporate security on confronting the lack of trust their audience faces due to the uptick in generative AI online

Choosing office facilities involves far more than evaluating rent and location. In the current landscape of seemingly escalating workplace violence, prioritizing workplace safety has never been more important. Security teams play a pivotal role in shaping the work environment, strategically implementing security measures that align with the layout and available resources in each office location.

Amanda Mason is currently serving as the Vice President of Intelligence for Related Companies, the largest privately held real estate company in the US. She joins this episode to share why security plays such an influential role in real estate decisions. Mason’s role is to integrate information from various sources and bridge the gap between cyber threats, national security, local law enforcement, physical security, and business intelligence. She provides threat information and solutions to the various subsidiaries under Related Companies, which include Real Estate, Infrastructure, Manufacturing, Hospitality, and International Finance. 

Key topics of Mason’s discussion with host Fred Burton include:

• Her transition from serving in the National Guard into the private sector, and the skills honed during her military tenure that have been instrumental in her success.
• The importance of learning how to ‘sell security’ and its role in shaping national security decisions.
• Security’s role in influencing decisions around office locations.
• Advice for corporate security teams when partnering with real estate or corporate leaders in managing and selecting office space.

Key takeaways:

14:00: Fred: How do you see securities' role in influencing decisions around office locations?

14:11: Amanda Mason: There definitely is a very strong role for security operations regarding the selection of locations and office bases. Threats of Workplace violence weigh on people's minds because nowadays companies are really being held responsible for the safety and security of their employees. Security really has a huge role in what the facility looks like and what are the security measures. Companies want to help minimize their risk and their exposure because the costs are very high for these types of criminal incidents to occur at or near their property.

15:34: Fred: Amanda what advice do you have for corporate security teams when partnering with real estate or corporate leaders in managing and selecting office space?

15:52 Amanda Mason: The first thing is — is there a security team there on hand, or do you need to bring in more resources? What are their resources and their procedures? Do you have an op center? How do you relay information back to the company as a tenant? How are you sharing information? What's the relation

Since October 7th, businesses in the Israel region and beyond have been forced to reframe how they think about their priorities based on the threat environment and the resources available. However, some are more prepared than others when it comes to planning and decision-making.

Tzahi Shraga is the Chief Intelligence Officer of MAX Security Solutions and joins the podcast to share what sets companies apart from others when faced with unforeseen circumstances. Shraga is a former lieutenant colonel from the Israeli intelligence services where he spent 29 years in service gaining vast experience in the field of operational intelligence. His deep expertise in strategic, risk and counter-terrorism analysis and intelligence collection has helped turn MAX into one of the security industry’s most innovative intelligence operations. 

Key topics of Shraga’s discussion with host Chuck Randolph include:

• How the Israel-Hamas War has impacted business operations, and what sectors in particular are at risk.
• What intel experts need to drive decision-making and forecasting in this volatile environment.
• What companies or business travelers should consider before traveling in the region.

Key takeaways:

12:36: Tzahi: Early preparation is essential way before the crisis starts. It's hard to believe, but even today and yesterday we have conversations and meetings with companies that didn't take any measures and only remembered when the reality hits them. I'm talking about having the right evacuation plans and awareness training for the employees. They need to know where is the next shelter and what to do when a Red Alert Siren is heard. 

29:08: Tzahi: You can read the newspaper and you'll have good facts, but as intel experts we need to bring assessments — our understanding of the environment and the situation and our prediction about what is to come. When we bring this we really help the decision making.

As we take time to celebrate the Veterans who have served and currently serve our country, it’s important to remember the unwavering thread that unites all branches of service— the commitment to protect. This same commitment has helped fuel successful security careers and build skillsets in ways that extend beyond protection — from putting others first to being comfortable with discomfort to moving forward and finding a new approach. 

Chuck Randolph, Chief Security Officer at Ontic and former Infantry and Information Operations Officer in the US Army, shares a selection of clips that feature guests on our series who have served in the military and use those experiences to influence successful security careers in corporations, family offices, and other environments in the private sector.

To hear more from the guests featured in this special round-up episode, check out their full recordings here:

The Art of Turning Information into Intelligence (George Taylor, President - Exlog Global)

Running Towards Fire — How to Mitigate Threats for Journalists in High-Risk Areas (Matt Bohatch, Director of Global Corporate Security and Site Operations for The Washington Post)

What it Takes to Detect Insider Threats from Ford Motor Company’s Senior Analyst (Dave Holder, Senior Analyst, Insider Threat Program at Ford Motor Company)

How Security Teams Enable Decision-Making in Times of Crisis (Major General Richard Lake, Former CSO of Booz Allen Hamilton and the Melinda and Richard Gates Foundation)

Former Marine Infantry Officer Shares Why Strategic Assessments Precede Tactical Mitigation (Jack Stradley, Founder and CEO of Exlog Global)

Thank you for listening to Ontic’s Protective Intelligence Podcast. Please subscribe to hear our future episodes. If you have any suggestions for guests, email us at [email protected].

Leading an insider threat program at a Fortune 100 company takes a certain skill set that can’t be molded into a single program or training certification. It takes a combination of capabilities and motivations to detect risk in some of the most challenging, unassuming places.

Dave Holder is a senior analyst with Ford Motor Company where he helps lead their insider risk program. He is a decorated former counterintelligence officer with expertise in national security investigations and operations, as well as corporate workforce investigations. His national-level awards include the National Counterintelligence Executive’s Investigative Team Award in 2014 and the Department of Defense Counterintelligence Team Award in 2009.

Key topics of Holder’s discussion with host Fred Burton include:

• How his experience as a Security Officer in the National Security Investigations Program  of the US Army shaped him into the leader he is today. 
• The most important skills needed to stand up an insider threat unit and the critical importance of understanding the importance of the human mind amid technological advancements (employees must feel empowered to report behaviors!)
• How technology has impacted the insider threat space and resources Holder recommends for those interested in exploring a career in this area. Here are the ones mentioned within the episode:
  • Borderless Behavior Analytics - Second Edition: Who's Inside? What're They Doing?
  • Inside Jobs: Why Insider Risk Is the Biggest Cyber Threat You Can't Ignore
  • Office of the Director of National Intelligence’s National Insider Threat Taskforce

Key takeaways:

01:23: Dave Holder: There are a lot of things in the military that carry directly over. Most of us coming out of these types of environments struggle with that balance a little bit. And with leadership, generally speaking, I learned you can't leave from behind. You have to be good at what you do as a practitioner. Have to be good with your people you've got to empower everyone and let them lead and innovate.

14:00: Dave Holder: When I think about the horizon I guess I could think about it in terms of where I think the enemy threat picture is going to use military terminology — defensively,  I have to react to what the adversary is doing, but offensively, can I create a framework that puts all of the odds in my favor. 

On the program-building side of things, I think we need to put more focus into that and hopefully, some of the work MITRE is doing to build out an insider threat framework similar to MITRE attack for cyber defense will produce some of the applied research findings that will help us to get ahead of the curve. 

In the meantime, we have to continue to professionalize this field that we're calling Insider threat or insider risk along the main core competencies. I think without those we're not fluent enough with compliance professionals, privacy professionals, offices of general counsel, etc. We have to be able to converse with them in terms they ah that they understand and that they care about.

With multiple crises happening around the globe, it’s impossible for organizations to ignore the threat of geopolitics to their business. Security teams are forced to think beyond what’s happening now and consider what’s around the corner. Many understand the duty of care to keep employees safe; however not all realize that this extends to the geopolitical landscape. It is the duty of security leaders to help their organization make sense of what’s happening and be a calm voice in the midst of permacrisis.

Ross Hill, Founder of Insight Forward, is that calm voice for many as he helps businesses understand risk. He applies his background leading intelligence analysis for prominent risk management organizations such as AT-RISK International and Pinkerton, and has acquired an in-depth knowledge of core processes, programme design and management, fulfilling senior management positions in global security and risk consultancies, and gaining exposure to renowned multinationals and driving their intelligence needs. He began his career as a Forensic DNA Analyst and as an Intelligence Analyst for the Metropolitan Police.

Check out Insight Forward’s latest report: Top 10 Geopolitical Risks for Businesses in 2024 and the latest geopolitical news by subscribing to Pestle & Mortar.

Key topics of Hill’s discussion with hosts Chuck Randolph and Fred Burton include:

• Why global and national companies alike cannot escape the impact of geopolitics on their business, and why it’s critical to look beyond the threats you face today.
• Why security leaders have a responsibility to help the people they protect make sense of the crises abroad and how misinformation (most notably with the Hamas War) has the ability to cause unwarranted concern and mistrust.
• The top three things corporate security teams can do right now in light of multiple crises happening around the globe.

With a knack for problem solving and an unwavering willingness to tackle some of the most challenging and emotionally demanding assignments, success isn't always guaranteed. However, for Katie Hall, these qualities have defined her career as a trusted investigator and executive protection professional.

Hall is a retired law enforcement officer with 21 years of experience first working patrol, then as a detective, followed by digital forensics. She specialized in investigations into child exploitation and served on the Internet Crimes Against Children Task Force. Hall also has private sector experience in executive protection and overseeing background investigations, intelligence investigations, and risk and crisis management.

Key topics of Hall’s discussion with host Dr. Marisa Randazzo include:

• How her aspirations of being a game warden evolved into her career today overseeing security for an executive office conducting background investigations, intelligence, investigations, and risk and crisis management.
• Why she felt fulfilled by cases that were most difficult to assess and how she built her resume by saying ‘yes’ to the cases no one else wanted to take on.
• Why law enforcement experience translates effectively into private sector investigative work and skills you need to adapt.

With a presidential election around the corner, many wonder what level of Secret Service protection is provided to hopeful candidates, when it is an option to receive, and what resources are used. After serving as a senior supervisor on the Secret Service Presidential Protective Division during her 26 year career with the U.S. Secret Service, Cynthia Marble shares what she knows on the topic.

Cynthia Marble is a nationally recognized leader in the fields of threat assessment and threat management, protective intelligence, investigations, national security, executive protection, and global security operations. She has extensive experience conducting as well as supervising threat assessment and protective intelligence investigations on high-profile public officials and public figures. Marble currently serves as Senior Director of Threat Management Operations for Ontic. 

Key topics of Marble’s discussion with host Fred Burton include:

• Timing for assigning Secret Service protection to presidential candidates, and how long former presidents receive protection
• Challenging aspects of her work and the unimaginable parts of securing even the smallest event to ensure every day is zero fail
• The most critical thing to look for when conducting a threat assessment

Key takeaways:

03:14: Cindy Marble: In general the committees look at the the viability of the candidates. It is threat-driven as far as the extent of the protection and exactly what type of resources are involved — those candidates that are deemed viable within that year are going to get protection.

07:35: Fred: Cindy, what worried you the most when it comes to just working a crowd or working an event?

07:57: Cindy Marble: What always worries us is what we don't know. It's honestly looking for that one thing that is out of place - out of the ordinary. Just being vigilant - things don't worry me, but they do concern me and to me, there's a difference. The way to alleviate the concern is to be educated and open to new information. It helps inform how we work an event. So I was definitely worried about the things that I didn't know and I think being comfortable with understanding that you don't sometimes know what you don't know and just being open to all possibilities. 

19:21: Cindy Marble: We know that oftentimes there's not a direct threat to a person or to an entity to a place but it's the behavior. It's statements that are concerning and opening up our minds and saying ‘okay, I'm not looking for that direct threat - what I'm looking at is that concerning behavior’ that that is easy to understand if I know that that's what I'm looking for if that makes sense. You may walk out of an interview and say I'm not 100 % sure that this person is a threat, but what I can do is I can manage the situation and I can say okay I do know that there's something that needs to be done.