(S04) (MAIN) Insider Flashpoints: How organizational change sparks insider leaks, and how to stop them

Periods of transition—new leadership, layoffs, M&A, business strategy shifts—create disruption. They also create risk. Insider leaks are rarely random; they often emerge from specific, predictable inflection points. In this session, Troy Batterberry, CEO of EchoMark and an enterprise security and technology leader, explores how moments of organizational change become flashpoints for insider threat activity.

Reviewing case studies from both government and commercial sectors, Troy will outline the “leak doom loop” and modern framework for identifying and securing vulnerable communication flows during periods of change. Examining the psychological, operational, and technological conditions that elevate leak risk—and how organizations can combine deterrence, visibility, and attribution to maintain or even regain control.

Attendees will leave with practical insights into how to:

Recognize common triggers of insider leaks before they happen

Deploy proactive security measures that adapt with organizational change

Leverage innovative tools like invisible watermarking to mitigate risk and promote accountability

This session is a must for leaders seeking to stay ahead of internal threats—not just detect them after the damage is done.