Latest / CYBR.Signal / Communication vs. Technology

Transcript

Communication vs. Technology · CYBR.Signal

• 0:00
  SPEAKER_00: And hello, everybody.
• 0:01
  SPEAKER_00: Happy Cyber Sunday.
• 0:02
  SPEAKER_00: Hope you're doing well.
• 0:03
  SPEAKER_00: So I was rolling through Twitter slash X, you know, X, the platform formerly known as Twitter.
• 0:12
  SPEAKER_00: Saw a post on there, and I'll include a link to the post, and there's some discussion after it, that said something, and I'm paraphrasing here, but something to the effect of everybody who's getting into cybersecurity thinks that the technology part of cybersecurity is the hardest part when it's actually communication.
• 0:33
  SPEAKER_00: And having been in IT and cybersecurity since what 2000 or no, 1994, I'm sorry.
• 0:40
  SPEAKER_00: I'm older than I thought I would.
• 0:42
  SPEAKER_00: I used to think that same thing with IT and security.
• 0:45
  SPEAKER_00: I used to be afraid of the technology, not afraid, just like worried.
• 0:48
  SPEAKER_00: Like I'm not going to be able to get it, or I'm going to understand it.
• 0:50
  SPEAKER_00: Is this hard?
• 0:50
  SPEAKER_00: Is this hard?
• 0:51
  SPEAKER_00: Um, getting things configured, where they go in the network, all that good stuff.
• 0:56
  SPEAKER_00: I learned this truth that this person put out there a long time ago, but sometimes I forget it.
• 1:03
  SPEAKER_00: And sometimes I forget to tell people who are new to cybersecurity or new to IT, or you know, when I'm because I there's a few people I kind of mentor and help them get into this and give them advice, and I want to do more of that.
• 1:16
  SPEAKER_00: And I sometimes I forget to tell them like, look, the the tech stuff is not easy, but it's not the hardest part of being in cybersecurity or being in any kind of field like this.
• 1:29
  SPEAKER_00: In order to have an effective security program, in order to be effective in general at cybersecurity, in order to mature your security posture.
• 1:42
  SPEAKER_00: Yes, you have to have technology, but fitting those pieces in where they are, even though it can be difficult to figure out what's the best piece for that, it's really what you have to think about what goes into choosing those things, choosing those pieces, those controls, that technology.
• 2:02
  SPEAKER_00: The hardest part of that is communicating.
• 2:04
  SPEAKER_00: Because if you're choosing, I just say you're you need a new cloud security posture management tool or a SaaS security posture manager, whatever, if you're not able to go in and talk to all the people around you that have some kind of you know skin in the game for why this, what this technology is, or what the best technology is to be chosen for this to fill that gap, then you're not getting all the information you need to do that.
• 2:38
  SPEAKER_00: You're you're gonna have a lack of information somewhere, um, lack of data somewhere.
• 2:44
  SPEAKER_00: So you're you you're your possibility of choosing the wrong technology goes up substantially if you're not communicating well.
• 2:54
  SPEAKER_00: If you're not communicating broadly enough.
• 2:56
  SPEAKER_00: I mean, there is such a thing as communicating too broadly, but if you're not getting the the right decision makers or people who have some type of, again, skin in the game, some type of influence or some some, you know, it's gonna affect them.
• 3:12
  SPEAKER_00: Their business unit, even if they're not cybersecurity, their business unit's gonna be affected.
• 3:17
  SPEAKER_00: This is gonna have some kind of effect on your development group.
• 3:20
  SPEAKER_00: This is gonna have some kind of effect on your uh legal group or your accounting group.
• 3:26
  SPEAKER_00: If you're not communicating with them, then you're you may lack data and information and you may make the wrong choice.
• 3:35
  SPEAKER_00: And it's not just knowing how to communicate, it's no again, this is knowing how to communicate and knowing who to communicate to.
• 3:45
  SPEAKER_00: Who are all of the people who are going to be affected by this decision?
• 3:50
  SPEAKER_00: Making sure you don't get too broad, because that's the other difficulty in communication.
• 3:54
  SPEAKER_00: If you widen that aperture too much and you get too many people involved, then you're gonna get analysis or paralysis by analysis.
• 4:02
  SPEAKER_00: You're gonna have too many too many chefs in the kitchen, basically.
• 4:05
  SPEAKER_00: It's just not it's not good either.
• 4:09
  SPEAKER_00: So so basically, this the summary is yes, it is completely valid to be a little bit worried about is the tech too hard.
• 4:19
  SPEAKER_00: But the communication aspect of it is severely undervalued, and so many people that I talk to in this field and other fields, you just all you have focus on is that tech, and you're not thinking about who it affects and what other people are going to be affected by it and how you communicate with them.
• 4:39
  SPEAKER_00: So just remember know your technology, know how to choose the right stuff, but know how to communicate.
• 4:46
  SPEAKER_00: Work on your communication skills and broaden those horizons when you're talking to people and know where you need to not be too narrow, but not also be too broad in your communication.
• 4:59
  SPEAKER_00: But choose the right people that you're gonna communicate to when you're making this decision.
• 5:04
  SPEAKER_00: This is not controls, are not just an IT slash cybersecurity decision.
• 5:09
  SPEAKER_00: They affect the whole organization, and you need to know who those key folks are that you need to communicate with.
• 5:16
  SPEAKER_00: So that's it.
• 5:16
  SPEAKER_00: Let me know what you think.
• 5:18
  SPEAKER_00: Talk to you next time.