Career Intelligence
Are You the Insider Threat?
Balancing connections, threats, and conversations at conferences.
A conference invitation can be easy to justify: new ideas, contacts, technology, and professional development. But start with a more practical question: What business purpose does this trip serve, and what justifies its cost?
That does not mean conferences lack value. The right event can help an organization evaluate vendors, identify issues, strengthen relationships, or develop an employee’s skills. Yet the agenda alone should not determine attendance.
A short presentation may offer perspective, but it rarely delivers deep training. Greater value often comes from conversations, demonstrations, and access to people who may not otherwise be available.
Those conversations can also create an insider-threat risk.
At an industry event, people want to appear knowledgeable and connected. They explain what they manage, describe challenges, and discuss projects on the horizon. In security, a casual discussion about a new system can disclose sensitive details: existing technology, vulnerabilities, budgets, procurement timing, decision-makers, or internal resistance.
This is not merely a theoretical concern. The FBI uses the term elicitation for efforts to draw out nonpublic information through conversation. The method is rarely dramatic. It may look like interest, professional curiosity, shared experience, or a flattering question that keeps someone talking.
“Before approving a trip, define what success looks like. Before sharing information, ask whether it belongs in the conversation.”
The risk does not end when the sessions do. Evening receptions, vendor dinners, and informal gatherings often involve alcohol, long days, and lowered guardrails. Someone offering career advice, a speaking opportunity, or an introduction may be testing how much access or information an attendee will provide. Federal counterintelligence guidance cautions that hostile actors may pose as recruiters or prospective employers to build relationships with people who have valuable access.
Organizations should not respond by avoiding conferences. They should treat them as business activities requiring clear objectives, sensible guardrails, and follow-up accountability.
Before approving a trip, define what success looks like. Before sharing information, ask whether it belongs in the conversation.
At a conference, every new connection may be valuable. The important question is: valuable to whom?
Looking for a reprint of this article?
From high-res PDFs to custom plaques, order your copy today!
