Cy Says Blog & Podcast

Cybersecurity is more than SOC analysts and penetration testing. Popular culture may glamorize the two previously mentioned occupations but there are other cyber careers like cybersecurity awareness training, product management, network security, cloud security, governance & risk, privacy analysis, identity access management, and more. There are many parallels between SOC analyst and these other careers namely the investigation methodology. A good resource for risk management is following a cybersecurity framework

Online safety is paramount for Amber as a mom of two small children. Parents and guardians of elementary students especially need to exercise parental controls like cutting off in-app purchases and chat features. Amber also discussed limiting physical access to devices by having blackout times and requiring devices to be used in common space areas. Offline activities for devices are preferential and maintaining open communication with your child is a must. Knowing that your child is properly equipped with online knowledge and prepared to tell you if anything concerning happens is the goal.

We all know the catch-22; I can't gain experience without a job, but the job requires experience. According to Brandt experience is the number one qualifier for a career and the proverbial silver bullet approach is networking. Given the large reset of the global economy due to the pandemic, layoffs have plagued every occupation. Brandt predicts tech jobs will be more layoff resistant but not completely immune. The idea of remote work also continues to be a way of lowering costs in terms of labor and office space.

The eco-system for cyber needs to be revamped for the future according to Eric Dunker Ph.D., Vice President of Workforce and Economic Development at Arapahoe Community College. Partnerships and pathways must be the new school approach. Colorado's bipartisan support of apprenticeship has propelled partnerships in the tech space with region-wide incentives. It's not a notion of either apprenticeship or college but how both can work in tandem.

When deciding on a new hire your HR has to be realistic about qualifications for the role. They also have to find the best ratio of no pedigree but experienced workers (Bulldogs) to hyper-specialized professionals (Brain surgeons). Shorten that fantasy laundry list of qualifications to essential skills because those that meet the fantasy requirement (Unicorns) have jobs already. Don't forget bulldogs often become brain surgeons. 

Dave Stapelton Chief Information Security Officer at Cyber GRX (Global Risk Exchange) details his journey from accounting to cybersecurity. He discusses how the role of CISO has evolved, why security programs are stigmatized as cost centers, and ways the cost center narrative can be changed.

Paul Cummings shares all the free training options for getting into cybersecurity. He names SANS Cyber Aces, Try Hack Me, Range Force, Evolve Security, Cyber Skills 2 Work, and his organization Whole Cyber Human Initiative as go-to training programs. Tony adds IT Pro TV To the list and urges users to treat these opportunities with the same discipline as paid training.

Erica Wilson current VP, Global Cybersecurity and Privacy Risk Management at RGA gives us a glimpse of her career journey and then explains fundamental things she has learned along the way. For instance, the importance of building a network prior to looking for a career and how to best reposition yourself with interdisciplinary skills. Erica urges those looking to get into cyber to study the companies they wish to work for and consider peripheral roles that may set them in desired roles later.