In this episode, Sam Wolf, assistant director of engineering and data security in financial services, makes the case that security teams have been pointing the finger in the wrong direction. It is not the human who is the weakest link, it is the systems built without the human in mind. Sam breaks down why the "department of no" mindset creates the very workarounds that put organizations at risk, and why the fix starts with understanding what the business is actually trying to accomplish before adding another
Takeaways:
Stop blaming the human for finding the path of least resistance. If people keep bumping into the same workaround, that is a design problem, not a training problem. Build controls around how people actually work, not how you wish they worked.
Retire the instinct to solve every gap with more training. A secure workflow should not require a class to use safely. If the right way is harder than the easy way, people will find the easy way every time.
Before greenlighting the next AI request, ask what happens if you say no. That single question separates a real business need from FOMO, and it gives you a starting point for mapping the request back to strategy and mission.
Treat tech debt like a product problem, not just a technical one. Look for the pieces you can decouple and simplify before adding another layer on top, and use contract renewal windows as a natural point to consolidate tools.
Document decisions the moment you make them, not after the fact. A shared record of what was agreed protects both security and the business, and it turns “why didn’t you catch this” into “here is what we agreed to.”
“Attitude, aptitude, and initiative. I can figure it out, you can figure it out.” - Sam Wolf
Connect with Sam:
LinkedIn: https://www.linkedin.com/in/samuelwolf/
Ways to Tune In:
Transistor: https://podcast.guardiansofthedata.show/
Spotify: https://open.spotify.com/show/5gZXInkb12Qrs2Lyv0hstQ
Apple Podcasts: https://podcasts.apple.com/us/podcast/guardians-of-the-data/id1826819323
Amazon Music: https://music.amazon.com/podcasts/0754cdde-f1c4-4f6c-92a2-e263f7840eb8/guardians-of-the-data
iHeart Radio: https://www.iheart.com/podcast/269-guardians-of-the-data-285972170/