Rethinking Risk: Why Security Isn't Just Compliance

Show Summary

What happens when a security failure costs a company its work? On this episode of Intelligent Access, host Michael Ashford talks with Derek Fleischmann about the business consequences of security decisions. Derek traces his path from teaching history to protecting classified information and auditing defense contractors. He shares an investigation that began with boxes of classified documents in a locked bathroom. A company's failure to report related concerns later cost its local office work and jobs. Derek also explains why security belongs in contract discussions. He talks about the risk of losing intellectual property to a competitor, the pressure to keep security costs low, and how security teams can make their case to leadership. His advice is practical: bring real examples to the conversation and get involved before decisions are made.

Key takeaways

• Security failures can affect a company's ability to win or keep contracts.
• Reporting an incident matters. Derek describes a company that lost work after failing to report security concerns.
• Insider threats can put intellectual property at risk and give competitors an advantage.
• Cutting security support to lower overhead can leave a company exposed.
• Security teams can use case studies and leadership meetings to raise risks before they become incidents.

Quotes

"They take your data and they go to another company, and then they do that thing better than you and cheaper because they didn't have to do any of the research and development."

"Through their inaction to report security incidents, they ended up losing a lot of work."

"Things like security get left out in the cold."

"Even if you can just get invited to the leadership meetings... you can inject into that conversation, 'have you thought about this?'"

Connect and learn more about Derek Fleischmann

This episode is brought to you by Sign In App. Subscribe, leave a review, and share the episode with your network. For more on security, compliance, and workplace experiences, visit signinapp.com.