Spotting the Charlatans: Red Flags for Enterprise Security Teams

I'm not currently working with any charlatans, but unfortunately, I have in the past. What are some tactics that charlatans employ and how can security teams spot the red flags before too much damage is done? I discuss in my latest SecurityWeek piece: https://www.securityweek.com/spotting-the-charlatans-red-flags-for-enterprise-security-teams/.