Dan Desko

First, ditch the notion that people are "human firewalls"! Create content that is FUN and ENGAGING! Not boring stock videos and click-through tests. Create customized content that addresses the specific needs and business risks of each department and role. This ensures that training is relevant and engaging, from basic cyber hygiene for all employees to advanced training for more technical staff or staff that has larger risks. By tailoring the training, we can enhance retention and practical application, making the organization more secure.

In my firsthand experience starting and leading a 50+ person cyber consulting firm I can say with certainty that embracing diversity in hiring fosters an inclusive culture that can attract even more talent. It’s a win-win situation where we not only fill the skills gap but also enhance the overall effectiveness and resilience of our cybersecurity efforts by bringing people into the fold that have a range of different life experiences that can be helpful to solving the business problems of cybersecurity.

Cybersecurity stands out as an industry characterized by its collaborative nature and strong community spirit. Those who understand that this field is about helping the good guys defeat the bad guys and are willing to share best practices will find a warm welcome and camaraderie among peers. There are numerous excellent options for joining a cybersecurity community in your area. I highly recommend exploring organizations such as ISACA, (ISC)², ISSA, BSides, OWASP, InfraGard, and others.

Establishing KPI's for vulnerability management is key to understanding the success of any program. Some KPIs to consider include: Patching Rate: How quickly and effectively systems are patched. This is an important security metric because it allows organizations to quickly address vulnerabilities. Vulnerability Age: The average length of time that vulnerabilities exist within a computing environment before being remediated. The older a vulnerability, the higher the risk. Vulnerability Reopen Rate: The rate at which a vulnerability reopens due to flaws in the vulnerability remediation process and in patch management.

Effective incident response drills usually take shape by way of tabletop exercises (TTXs), and the most valuable tabletops take into account business needs and risks. Our team has performed countless TTXs and some of the best planning tips are as follows: ✅ Utilize Threat Intel - Base the scenario on actual likely threat actor activity for your size of company and industry. ✅ Realistic - The scenario must be realistic in the sense that the series of events that play out are seen as plausible. ✅ Tailored and Specific - The scenario must make business sense and reference the technology and people that are at your org. ✅ Trusted Insider - Leverage a trusted insider for the drill to get enough insider info to accomplish the above!

Sharing is caring. Especially in the world of cybersecurity. Our consulting team that does penetration testing are advocates of allowing our clients to do some shoulder surfing and on the job learning of how we attack them. We find that opening up the black box allows for collaboration and learning that would otherwise be very hard to achieve in a siloed-style environment. Plus, interacting with other humans after a long technical stretch could be just what the doctor ordered to prevent some burnout and stress!