So you might consider infosec as a career prospect? Great ! However you have lots of questions? Great as well since this outlines you have, in my opinion, the three most necessary qualities to conduct infosec activities: curiosity, doubtness and humility.
Infosec being a relatively recent interest to organizations (as opposed to accounting for instance) you should expect having to explain lots of stuff to lots of people. That is why getting used to communication, explaining, teaching, training and coaching would be a huge plus for your careers. In my previous years I have come to realize that what works for most people (being CEO running multi millions company, 5-year olds or even eldery people) is analogy.
As such in some article on this blog we will use this simple communication tool and imagine… what if infosec what something else. This will give you an understanding of what to expect from infosec and from this blog as well.
So let’s dive in. What if infosec was a sport?
To me it would without a doubt be surfing 🏄. Why?
⚖️ It a demanding sport requiring to find a balance point #RiskAppetite
🦈 Once found, one must maintain it despite the ever changing environment that might prove to be that doesn’t want only good for us #Vulnerabilities.
🌊 Surfing works by iterations: one wave after another. #BabySteps
🗓️ Before surfing a big wave, you need to plan it, to forecast it so that you will be not crushed by it. #ChangeManagement
🔥 Last but not least: surfing is a real passion for passionate community and it is undoubtedly #fun !!
I would be grateful to read your views of this analogy. Should you have to pick one sport to represent InfoSec, what would have been your choice?
Leave a Reply