SlideShare a Scribd company logo
INFORMATION SECURITY
WARRIOR
Mike Spaulding
@fatherofmaddog
Opinions and Legal Stuff
• The opinions that I express in this presentation
are my own and do not represent my
employer(s) opinions.
• Also, any advice given during this presentation
is given without any legal regard. If you have
questions that you are doing something illegal
or doing something that you think can get you
sued, please consult an attorney - do not call
me!
InfoSec Warrior
This talk really started out as a spoof. I was talking about team
challenges and using the Hasbro GI Joes to make talking points.
Everything referred to ‘Yo Joe’ and ‘name dropped Duke, Scarlet,
and SnakeEyes.
Everyone on our team loved it, I hope that you do too!
Special Operations Forces
What we imagine …
What is reality …
Special Operations Forces
• Physically Special Operations forces are well
conditioned. There are no lazy SF team
members.
• Mentally the belief within this community is that
you either have it or you don’t.
• There is no ‘luck’ to selection.
• What happens when we apply this to the
InfoSec Community?
Recruiting
• As Information Security
Professionals we are highly
sought after.
• You must always be of the
mindset that you are always
recruiting.
Recruiting
• The ideal candidate does not
need to be university trained, but
… they need to bring depth to the
team.
• What talent do they have that I don’t already have on my team?
• “You must always be of the
mindset that you are always
recruiting.”
Recruiting
• Recruiting takes real effort!
You must anticipate your
needs. A good architect should
help with this.
• Recruiting requires
understanding people; motives,
wants, desires, and identifying
character flaws.
Team Building
• Getting the right team; We all
want to be on a ‘Dream Team’,
but people get in the way.
• Strong Leadership is required
at all levels of the security
team. Leadership at the
smallest items really matter.
Team Building
• Define the Roles
• Eliminate Overlap
• Require Transparency
• Improve Processes
• Fill the Gap
• Remove Obstacles
• Think outside of the Box
• Accept the Adaptability Requirement
Training
• IT IS THIS SIMPLE:
You fight like you train!
• Those who ‘wing-it’ will repeat
the same task several times;
hopefully they will get it right
eventually.
Training
• Take Training Seriously
• If your organization does not
want to fund/train security
staff expect poor results and
continued poor behavior.
Crisis Management
• You Fight Like You Train!
• When things go to hell in a
hand basket, how will your
team respond?
• Do you actually expect your
team to pass with flying
colors? Are you being realistic
with your expectations?
Crisis Management
• Mr Murphy will allows appear
when he is least expected.
• Your success at Crisis
Management is dependent on
on your recruiting, team
building, and training.
• Were you prepared?
Sheepdogging (Mentoring)
• People are classified as two
groups, even within a pack:
• Sheepdogs; those who
watch over those who may
run into trouble
• Sheep; everyone else
• Let’s face it, if you work in
InfoSec you run a high risk of
getting fired.
Sheepdogging (Mentoring)
• As a professional, you have a
responsibility to mentor.
• Ideally, your ‘mentee’ should be
better than you in every respect.
If you hoard knowledge, if your
‘mentee’ cannot surpass your
technical skills, if your ‘mentee’
cannot out perform you .. then
you have failed.
Winning
• Winning is a state of mind!
• Winners will always find a
way to achieve success,
regardless of the situation.
• Honorable winners can do
this with class.
Winning
• Not all wins are pretty, wins
can be ugly
• Winning may very well be just
surviving.
• ie. Changing business landscapes may make your business
attractive for merger & acquisition.
Future Talk?
• If you liked this talk, let me
know.
• I am considering talking
about operationalizing
F3AD for InfoSec needs.
Possibly adding in
“Cyber-Kill Chain” to the
presentation. Purple
Teaming would also be
addressed.
Contact & Shameless Plug
•@fatherofmaddog
•@bsidescolumbus
Columbus BSides Conference
Monday, January 19th, 2015
~150 people showed up this
year
expecting ~180 in 2015

More Related Content

What's hot

Leadership secrets of Lee Kuan Yew
Leadership secrets of Lee Kuan YewLeadership secrets of Lee Kuan Yew
Leadership secrets of Lee Kuan Yew
C J Ng
 
7 C's of Leadership
7 C's of Leadership7 C's of Leadership
7 C's of Leadership
businesswhitt
 
Startup Asia Jakarta 2013: CEO Tips
Startup Asia Jakarta 2013: CEO TipsStartup Asia Jakarta 2013: CEO Tips
Startup Asia Jakarta 2013: CEO Tips
Tech in Asia
 
Lead Generation Rep Recruiting
Lead Generation Rep RecruitingLead Generation Rep Recruiting
Lead Generation Rep Recruiting
OpenView
 
Building Your Team (7 Deadly Sins of Recruiting) - May 2014
Building Your Team (7 Deadly Sins of Recruiting) - May 2014Building Your Team (7 Deadly Sins of Recruiting) - May 2014
Building Your Team (7 Deadly Sins of Recruiting) - May 2014
Swami Kumaresan
 
The power of one and the magic of compound building
The power of one and the magic of compound buildingThe power of one and the magic of compound building
The power of one and the magic of compound building
Bryan Daly
 
01. From Effectiveness to Greatness
01. From Effectiveness to Greatness01. From Effectiveness to Greatness
01. From Effectiveness to Greatness
Samsara Academy
 
The power of one 90day challenge
The power of one 90day challengeThe power of one 90day challenge
The power of one 90day challenge
Bryan Daly
 
Wobe - Jan 2015 - Team & Culture Doc
Wobe - Jan 2015 - Team & Culture DocWobe - Jan 2015 - Team & Culture Doc
Wobe - Jan 2015 - Team & Culture Doc
Wobe Pte Ltd
 
Being unstoppable,Prentation by David Cohen
Being unstoppable,Prentation by David CohenBeing unstoppable,Prentation by David Cohen
Being unstoppable,Prentation by David Cohen
Milton Chamber of Commerce
 
"3 Ways to Improve the Mentoring Process" (at Work and in Life)
"3 Ways to Improve the Mentoring Process" (at Work and in Life)"3 Ways to Improve the Mentoring Process" (at Work and in Life)
"3 Ways to Improve the Mentoring Process" (at Work and in Life)
Jason W. Womack, MEd MA
 
Leadership Lesson for the Aspiring Leader
Leadership Lesson for the Aspiring LeaderLeadership Lesson for the Aspiring Leader
Leadership Lesson for the Aspiring Leader
Lucas Group
 
Builder's Mindset and Recruiter's Mentality
Builder's Mindset and Recruiter's MentalityBuilder's Mindset and Recruiter's Mentality
Builder's Mindset and Recruiter's Mentality
Bryan Daly
 
Consulting 101 day 4
Consulting 101 day 4Consulting 101 day 4
Consulting 101 day 4
Dr. Wael Youssef
 
7 Reasons Why You Should Join A Mastermind Group
7 Reasons Why You Should Join A Mastermind Group7 Reasons Why You Should Join A Mastermind Group
7 Reasons Why You Should Join A Mastermind Group
Olive Angeli Tabin
 
Who's on your team
Who's on your teamWho's on your team
Who's on your team
David Saxe
 
Recruiters mentality builders mindset nlfa
Recruiters mentality builders mindset nlfaRecruiters mentality builders mindset nlfa
Recruiters mentality builders mindset nlfa
Bryan Daly
 

What's hot (17)

Leadership secrets of Lee Kuan Yew
Leadership secrets of Lee Kuan YewLeadership secrets of Lee Kuan Yew
Leadership secrets of Lee Kuan Yew
 
7 C's of Leadership
7 C's of Leadership7 C's of Leadership
7 C's of Leadership
 
Startup Asia Jakarta 2013: CEO Tips
Startup Asia Jakarta 2013: CEO TipsStartup Asia Jakarta 2013: CEO Tips
Startup Asia Jakarta 2013: CEO Tips
 
Lead Generation Rep Recruiting
Lead Generation Rep RecruitingLead Generation Rep Recruiting
Lead Generation Rep Recruiting
 
Building Your Team (7 Deadly Sins of Recruiting) - May 2014
Building Your Team (7 Deadly Sins of Recruiting) - May 2014Building Your Team (7 Deadly Sins of Recruiting) - May 2014
Building Your Team (7 Deadly Sins of Recruiting) - May 2014
 
The power of one and the magic of compound building
The power of one and the magic of compound buildingThe power of one and the magic of compound building
The power of one and the magic of compound building
 
01. From Effectiveness to Greatness
01. From Effectiveness to Greatness01. From Effectiveness to Greatness
01. From Effectiveness to Greatness
 
The power of one 90day challenge
The power of one 90day challengeThe power of one 90day challenge
The power of one 90day challenge
 
Wobe - Jan 2015 - Team & Culture Doc
Wobe - Jan 2015 - Team & Culture DocWobe - Jan 2015 - Team & Culture Doc
Wobe - Jan 2015 - Team & Culture Doc
 
Being unstoppable,Prentation by David Cohen
Being unstoppable,Prentation by David CohenBeing unstoppable,Prentation by David Cohen
Being unstoppable,Prentation by David Cohen
 
"3 Ways to Improve the Mentoring Process" (at Work and in Life)
"3 Ways to Improve the Mentoring Process" (at Work and in Life)"3 Ways to Improve the Mentoring Process" (at Work and in Life)
"3 Ways to Improve the Mentoring Process" (at Work and in Life)
 
Leadership Lesson for the Aspiring Leader
Leadership Lesson for the Aspiring LeaderLeadership Lesson for the Aspiring Leader
Leadership Lesson for the Aspiring Leader
 
Builder's Mindset and Recruiter's Mentality
Builder's Mindset and Recruiter's MentalityBuilder's Mindset and Recruiter's Mentality
Builder's Mindset and Recruiter's Mentality
 
Consulting 101 day 4
Consulting 101 day 4Consulting 101 day 4
Consulting 101 day 4
 
7 Reasons Why You Should Join A Mastermind Group
7 Reasons Why You Should Join A Mastermind Group7 Reasons Why You Should Join A Mastermind Group
7 Reasons Why You Should Join A Mastermind Group
 
Who's on your team
Who's on your teamWho's on your team
Who's on your team
 
Recruiters mentality builders mindset nlfa
Recruiters mentality builders mindset nlfaRecruiters mentality builders mindset nlfa
Recruiters mentality builders mindset nlfa
 

Similar to CMH Security Summit 2014 - InfoSec Warrior

Feu Tech Star Performer @ Work
Feu Tech Star Performer @ WorkFeu Tech Star Performer @ Work
Feu Tech Star Performer @ Work
Christian John Felix
 
International Edition - Motivate and Empower Globally-Competitive Teams of Co...
International Edition - Motivate and Empower Globally-Competitive Teams of Co...International Edition - Motivate and Empower Globally-Competitive Teams of Co...
International Edition - Motivate and Empower Globally-Competitive Teams of Co...
Saiff Solutions, Inc.
 
Eo inside business event 2012
Eo inside business event 2012Eo inside business event 2012
Eo inside business event 2012
sdowns44
 
Entrepreneurship mindsets
Entrepreneurship mindsetsEntrepreneurship mindsets
Entrepreneurship mindsets
Robin Low
 
Barry Saiff -Managing Content Development Teams: Inner Mastery for Outer Success
Barry Saiff -Managing Content Development Teams: Inner Mastery for Outer SuccessBarry Saiff -Managing Content Development Teams: Inner Mastery for Outer Success
Barry Saiff -Managing Content Development Teams: Inner Mastery for Outer Success
LavaConConference
 
Motivation.ppsx
Motivation.ppsxMotivation.ppsx
Motivation.ppsx
ssuserb6619e
 
Book Digest
Book DigestBook Digest
Book Digest
Serge Hutin
 
Moneyball Recruiting - Tim Sackett
Moneyball Recruiting - Tim SackettMoneyball Recruiting - Tim Sackett
Moneyball Recruiting - Tim Sackett
Tim Sackett, SPHR, SCP
 
Wining
WiningWining
C4 e coaching_exe_bro_sept2011
C4 e coaching_exe_bro_sept2011C4 e coaching_exe_bro_sept2011
C4 e coaching_exe_bro_sept2011
Sairamesh G
 
C4 e coaching1_prstn bro_sept2011
C4 e coaching1_prstn bro_sept2011C4 e coaching1_prstn bro_sept2011
C4 e coaching1_prstn bro_sept2011
Sairamesh G
 
C4 e coaching_exe_bro_sept2011
C4 e coaching_exe_bro_sept2011C4 e coaching_exe_bro_sept2011
C4 e coaching_exe_bro_sept2011
Sairamesh G
 
Game Studio Leadership: You Can Do It
Game Studio Leadership: You Can Do ItGame Studio Leadership: You Can Do It
Game Studio Leadership: You Can Do It
Jesse Schell
 
Blake Hall: IDme Culture Deck 2020
Blake Hall: IDme Culture Deck 2020Blake Hall: IDme Culture Deck 2020
Blake Hall: IDme Culture Deck 2020
PatrickDePuydt1
 
C.A.R.V.E. and S.L.A.P. Your Way to T.H.R.I.V.E. as a Manager
C.A.R.V.E. and S.L.A.P. Your Way to T.H.R.I.V.E. as a ManagerC.A.R.V.E. and S.L.A.P. Your Way to T.H.R.I.V.E. as a Manager
C.A.R.V.E. and S.L.A.P. Your Way to T.H.R.I.V.E. as a Manager
Saiff Solutions, Inc.
 
6 keys to a successful transition
6 keys to a successful transition6 keys to a successful transition
6 keys to a successful transition
Doris Tirone Drake (MLIR, HCS)
 
Id.me culture deck 2020 links all buttons
Id.me culture deck 2020 links all buttonsId.me culture deck 2020 links all buttons
Id.me culture deck 2020 links all buttons
Edward Park
 
ID.me Culture Deck | 2020
ID.me Culture Deck | 2020ID.me Culture Deck | 2020
ID.me Culture Deck | 2020
PatrickDePuydt1
 
Id.me culture deck 2020 with updated links
Id.me culture deck 2020 with updated linksId.me culture deck 2020 with updated links
Id.me culture deck 2020 with updated links
Edward Park
 
Id.me culture deck 2020 links Tony Tony
Id.me culture deck 2020 links Tony TonyId.me culture deck 2020 links Tony Tony
Id.me culture deck 2020 links Tony Tony
Edward Park
 

Similar to CMH Security Summit 2014 - InfoSec Warrior (20)

Feu Tech Star Performer @ Work
Feu Tech Star Performer @ WorkFeu Tech Star Performer @ Work
Feu Tech Star Performer @ Work
 
International Edition - Motivate and Empower Globally-Competitive Teams of Co...
International Edition - Motivate and Empower Globally-Competitive Teams of Co...International Edition - Motivate and Empower Globally-Competitive Teams of Co...
International Edition - Motivate and Empower Globally-Competitive Teams of Co...
 
Eo inside business event 2012
Eo inside business event 2012Eo inside business event 2012
Eo inside business event 2012
 
Entrepreneurship mindsets
Entrepreneurship mindsetsEntrepreneurship mindsets
Entrepreneurship mindsets
 
Barry Saiff -Managing Content Development Teams: Inner Mastery for Outer Success
Barry Saiff -Managing Content Development Teams: Inner Mastery for Outer SuccessBarry Saiff -Managing Content Development Teams: Inner Mastery for Outer Success
Barry Saiff -Managing Content Development Teams: Inner Mastery for Outer Success
 
Motivation.ppsx
Motivation.ppsxMotivation.ppsx
Motivation.ppsx
 
Book Digest
Book DigestBook Digest
Book Digest
 
Moneyball Recruiting - Tim Sackett
Moneyball Recruiting - Tim SackettMoneyball Recruiting - Tim Sackett
Moneyball Recruiting - Tim Sackett
 
Wining
WiningWining
Wining
 
C4 e coaching_exe_bro_sept2011
C4 e coaching_exe_bro_sept2011C4 e coaching_exe_bro_sept2011
C4 e coaching_exe_bro_sept2011
 
C4 e coaching1_prstn bro_sept2011
C4 e coaching1_prstn bro_sept2011C4 e coaching1_prstn bro_sept2011
C4 e coaching1_prstn bro_sept2011
 
C4 e coaching_exe_bro_sept2011
C4 e coaching_exe_bro_sept2011C4 e coaching_exe_bro_sept2011
C4 e coaching_exe_bro_sept2011
 
Game Studio Leadership: You Can Do It
Game Studio Leadership: You Can Do ItGame Studio Leadership: You Can Do It
Game Studio Leadership: You Can Do It
 
Blake Hall: IDme Culture Deck 2020
Blake Hall: IDme Culture Deck 2020Blake Hall: IDme Culture Deck 2020
Blake Hall: IDme Culture Deck 2020
 
C.A.R.V.E. and S.L.A.P. Your Way to T.H.R.I.V.E. as a Manager
C.A.R.V.E. and S.L.A.P. Your Way to T.H.R.I.V.E. as a ManagerC.A.R.V.E. and S.L.A.P. Your Way to T.H.R.I.V.E. as a Manager
C.A.R.V.E. and S.L.A.P. Your Way to T.H.R.I.V.E. as a Manager
 
6 keys to a successful transition
6 keys to a successful transition6 keys to a successful transition
6 keys to a successful transition
 
Id.me culture deck 2020 links all buttons
Id.me culture deck 2020 links all buttonsId.me culture deck 2020 links all buttons
Id.me culture deck 2020 links all buttons
 
ID.me Culture Deck | 2020
ID.me Culture Deck | 2020ID.me Culture Deck | 2020
ID.me Culture Deck | 2020
 
Id.me culture deck 2020 with updated links
Id.me culture deck 2020 with updated linksId.me culture deck 2020 with updated links
Id.me culture deck 2020 with updated links
 
Id.me culture deck 2020 links Tony Tony
Id.me culture deck 2020 links Tony TonyId.me culture deck 2020 links Tony Tony
Id.me culture deck 2020 links Tony Tony
 

More from Mike Spaulding

BlackHat Presentation - Lies and Damn Lies: Getting past the Hype of Endpoint...
BlackHat Presentation - Lies and Damn Lies: Getting past the Hype of Endpoint...BlackHat Presentation - Lies and Damn Lies: Getting past the Hype of Endpoint...
BlackHat Presentation - Lies and Damn Lies: Getting past the Hype of Endpoint...
Mike Spaulding
 
Redefining Security in the Cloud
Redefining Security in the CloudRedefining Security in the Cloud
Redefining Security in the Cloud
Mike Spaulding
 
Attacking Automation: Hacking for the Next Fifty Years
Attacking Automation: Hacking for the Next Fifty YearsAttacking Automation: Hacking for the Next Fifty Years
Attacking Automation: Hacking for the Next Fifty Years
Mike Spaulding
 
Building an AppSec Team Extended Cut
Building an AppSec Team Extended CutBuilding an AppSec Team Extended Cut
Building an AppSec Team Extended Cut
Mike Spaulding
 
Windows 8 Forensics & Anti Forensics
Windows 8 Forensics & Anti ForensicsWindows 8 Forensics & Anti Forensics
Windows 8 Forensics & Anti Forensics
Mike Spaulding
 
Policy Map
Policy MapPolicy Map
Policy Map
Mike Spaulding
 
Data Leakage Presentation
Data Leakage PresentationData Leakage Presentation
Data Leakage Presentation
Mike Spaulding
 
Bank One App Sec Training
Bank One App Sec TrainingBank One App Sec Training
Bank One App Sec Training
Mike Spaulding
 
Web Application Hacking 2004
Web Application Hacking 2004Web Application Hacking 2004
Web Application Hacking 2004
Mike Spaulding
 
DNS Vulnerabilities
DNS VulnerabilitiesDNS Vulnerabilities
DNS Vulnerabilities
Mike Spaulding
 
PaloAlto Ignite Conference 2015
PaloAlto Ignite Conference 2015PaloAlto Ignite Conference 2015
PaloAlto Ignite Conference 2015
Mike Spaulding
 

More from Mike Spaulding (11)

BlackHat Presentation - Lies and Damn Lies: Getting past the Hype of Endpoint...
BlackHat Presentation - Lies and Damn Lies: Getting past the Hype of Endpoint...BlackHat Presentation - Lies and Damn Lies: Getting past the Hype of Endpoint...
BlackHat Presentation - Lies and Damn Lies: Getting past the Hype of Endpoint...
 
Redefining Security in the Cloud
Redefining Security in the CloudRedefining Security in the Cloud
Redefining Security in the Cloud
 
Attacking Automation: Hacking for the Next Fifty Years
Attacking Automation: Hacking for the Next Fifty YearsAttacking Automation: Hacking for the Next Fifty Years
Attacking Automation: Hacking for the Next Fifty Years
 
Building an AppSec Team Extended Cut
Building an AppSec Team Extended CutBuilding an AppSec Team Extended Cut
Building an AppSec Team Extended Cut
 
Windows 8 Forensics & Anti Forensics
Windows 8 Forensics & Anti ForensicsWindows 8 Forensics & Anti Forensics
Windows 8 Forensics & Anti Forensics
 
Policy Map
Policy MapPolicy Map
Policy Map
 
Data Leakage Presentation
Data Leakage PresentationData Leakage Presentation
Data Leakage Presentation
 
Bank One App Sec Training
Bank One App Sec TrainingBank One App Sec Training
Bank One App Sec Training
 
Web Application Hacking 2004
Web Application Hacking 2004Web Application Hacking 2004
Web Application Hacking 2004
 
DNS Vulnerabilities
DNS VulnerabilitiesDNS Vulnerabilities
DNS Vulnerabilities
 
PaloAlto Ignite Conference 2015
PaloAlto Ignite Conference 2015PaloAlto Ignite Conference 2015
PaloAlto Ignite Conference 2015
 

Recently uploaded

Addiction to Winning Across Diverse Populations.pdf
Addiction to Winning Across Diverse Populations.pdfAddiction to Winning Across Diverse Populations.pdf
Addiction to Winning Across Diverse Populations.pdf
Bill641377
 
Integrity in leadership builds trust by ensuring consistency between words an...
Integrity in leadership builds trust by ensuring consistency between words an...Integrity in leadership builds trust by ensuring consistency between words an...
Integrity in leadership builds trust by ensuring consistency between words an...
Ram V Chary
 
Colby Hobson: Residential Construction Leader Building a Solid Reputation Thr...
Colby Hobson: Residential Construction Leader Building a Solid Reputation Thr...Colby Hobson: Residential Construction Leader Building a Solid Reputation Thr...
Colby Hobson: Residential Construction Leader Building a Solid Reputation Thr...
dsnow9802
 
Make it or Break it - Insights for achieving Product-market fit .pdf
Make it or Break it - Insights for achieving Product-market fit .pdfMake it or Break it - Insights for achieving Product-market fit .pdf
Make it or Break it - Insights for achieving Product-market fit .pdf
Resonate Digital
 
Strategic Org Design with Org Topologies™
Strategic Org Design with Org Topologies™Strategic Org Design with Org Topologies™
Strategic Org Design with Org Topologies™
Alexey Krivitsky
 
在线办理(UVic毕业证书)维多利亚大学毕业证录取通知书一模一样
在线办理(UVic毕业证书)维多利亚大学毕业证录取通知书一模一样在线办理(UVic毕业证书)维多利亚大学毕业证录取通知书一模一样
在线办理(UVic毕业证书)维多利亚大学毕业证录取通知书一模一样
tdt5v4b
 
Public Speaking Tips to Help You Be A Strong Leader.pdf
Public Speaking Tips to Help You Be A Strong Leader.pdfPublic Speaking Tips to Help You Be A Strong Leader.pdf
Public Speaking Tips to Help You Be A Strong Leader.pdf
Pinta Partners
 
Credit-Management seminar for cooperative power point presentation
Credit-Management seminar for cooperative power point presentationCredit-Management seminar for cooperative power point presentation
Credit-Management seminar for cooperative power point presentation
bernanbumatay1
 
Ganpati Kumar Choudhary Indian Ethos PPT.pptx
Ganpati Kumar Choudhary Indian Ethos PPT.pptxGanpati Kumar Choudhary Indian Ethos PPT.pptx
Ganpati Kumar Choudhary Indian Ethos PPT.pptx
GanpatiKumarChoudhar
 
Comparing Stability and Sustainability in Agile Systems
Comparing Stability and Sustainability in Agile SystemsComparing Stability and Sustainability in Agile Systems
Comparing Stability and Sustainability in Agile Systems
Rob Healy
 
The Management Guide: From Projects to Portfolio
The Management Guide: From Projects to PortfolioThe Management Guide: From Projects to Portfolio
The Management Guide: From Projects to Portfolio
Ahmed AbdelMoneim
 
Sethurathnam Ravi: A Legacy in Finance and Leadership
Sethurathnam Ravi: A Legacy in Finance and LeadershipSethurathnam Ravi: A Legacy in Finance and Leadership
Sethurathnam Ravi: A Legacy in Finance and Leadership
Anjana Josie
 
原版制作(CDU毕业证书)查尔斯达尔文大学毕业证PDF成绩单一模一样
原版制作(CDU毕业证书)查尔斯达尔文大学毕业证PDF成绩单一模一样原版制作(CDU毕业证书)查尔斯达尔文大学毕业证PDF成绩单一模一样
原版制作(CDU毕业证书)查尔斯达尔文大学毕业证PDF成绩单一模一样
tdt5v4b
 
20240608 QFM019 Engineering Leadership Reading List May 2024
20240608 QFM019 Engineering Leadership Reading List May 202420240608 QFM019 Engineering Leadership Reading List May 2024
20240608 QFM019 Engineering Leadership Reading List May 2024
Matthew Sinclair
 
一比一原版(QU毕业证)皇后大学毕业证如何办理
一比一原版(QU毕业证)皇后大学毕业证如何办理一比一原版(QU毕业证)皇后大学毕业证如何办理
一比一原版(QU毕业证)皇后大学毕业证如何办理
8p28uk6g
 
Employment Practices Regulation and Multinational Corporations
Employment PracticesRegulation and Multinational CorporationsEmployment PracticesRegulation and Multinational Corporations
Employment Practices Regulation and Multinational Corporations
RoopaTemkar
 
Enriching engagement with ethical review processes
Enriching engagement with ethical review processesEnriching engagement with ethical review processes
Enriching engagement with ethical review processes
strikingabalance
 
Resource-mobilization-guide-for-community-based-organizations1.pdf
Resource-mobilization-guide-for-community-based-organizations1.pdfResource-mobilization-guide-for-community-based-organizations1.pdf
Resource-mobilization-guide-for-community-based-organizations1.pdf
FeteneA
 
原版制作(澳洲WSU毕业证书)西悉尼大学毕业证文凭证书一模一样
原版制作(澳洲WSU毕业证书)西悉尼大学毕业证文凭证书一模一样原版制作(澳洲WSU毕业证书)西悉尼大学毕业证文凭证书一模一样
原版制作(澳洲WSU毕业证书)西悉尼大学毕业证文凭证书一模一样
tdt5v4b
 
在线办理(Murdoch毕业证书)莫道克大学毕业证电子版成绩单一模一样
在线办理(Murdoch毕业证书)莫道克大学毕业证电子版成绩单一模一样在线办理(Murdoch毕业证书)莫道克大学毕业证电子版成绩单一模一样
在线办理(Murdoch毕业证书)莫道克大学毕业证电子版成绩单一模一样
tdt5v4b
 

Recently uploaded (20)

Addiction to Winning Across Diverse Populations.pdf
Addiction to Winning Across Diverse Populations.pdfAddiction to Winning Across Diverse Populations.pdf
Addiction to Winning Across Diverse Populations.pdf
 
Integrity in leadership builds trust by ensuring consistency between words an...
Integrity in leadership builds trust by ensuring consistency between words an...Integrity in leadership builds trust by ensuring consistency between words an...
Integrity in leadership builds trust by ensuring consistency between words an...
 
Colby Hobson: Residential Construction Leader Building a Solid Reputation Thr...
Colby Hobson: Residential Construction Leader Building a Solid Reputation Thr...Colby Hobson: Residential Construction Leader Building a Solid Reputation Thr...
Colby Hobson: Residential Construction Leader Building a Solid Reputation Thr...
 
Make it or Break it - Insights for achieving Product-market fit .pdf
Make it or Break it - Insights for achieving Product-market fit .pdfMake it or Break it - Insights for achieving Product-market fit .pdf
Make it or Break it - Insights for achieving Product-market fit .pdf
 
Strategic Org Design with Org Topologies™
Strategic Org Design with Org Topologies™Strategic Org Design with Org Topologies™
Strategic Org Design with Org Topologies™
 
在线办理(UVic毕业证书)维多利亚大学毕业证录取通知书一模一样
在线办理(UVic毕业证书)维多利亚大学毕业证录取通知书一模一样在线办理(UVic毕业证书)维多利亚大学毕业证录取通知书一模一样
在线办理(UVic毕业证书)维多利亚大学毕业证录取通知书一模一样
 
Public Speaking Tips to Help You Be A Strong Leader.pdf
Public Speaking Tips to Help You Be A Strong Leader.pdfPublic Speaking Tips to Help You Be A Strong Leader.pdf
Public Speaking Tips to Help You Be A Strong Leader.pdf
 
Credit-Management seminar for cooperative power point presentation
Credit-Management seminar for cooperative power point presentationCredit-Management seminar for cooperative power point presentation
Credit-Management seminar for cooperative power point presentation
 
Ganpati Kumar Choudhary Indian Ethos PPT.pptx
Ganpati Kumar Choudhary Indian Ethos PPT.pptxGanpati Kumar Choudhary Indian Ethos PPT.pptx
Ganpati Kumar Choudhary Indian Ethos PPT.pptx
 
Comparing Stability and Sustainability in Agile Systems
Comparing Stability and Sustainability in Agile SystemsComparing Stability and Sustainability in Agile Systems
Comparing Stability and Sustainability in Agile Systems
 
The Management Guide: From Projects to Portfolio
The Management Guide: From Projects to PortfolioThe Management Guide: From Projects to Portfolio
The Management Guide: From Projects to Portfolio
 
Sethurathnam Ravi: A Legacy in Finance and Leadership
Sethurathnam Ravi: A Legacy in Finance and LeadershipSethurathnam Ravi: A Legacy in Finance and Leadership
Sethurathnam Ravi: A Legacy in Finance and Leadership
 
原版制作(CDU毕业证书)查尔斯达尔文大学毕业证PDF成绩单一模一样
原版制作(CDU毕业证书)查尔斯达尔文大学毕业证PDF成绩单一模一样原版制作(CDU毕业证书)查尔斯达尔文大学毕业证PDF成绩单一模一样
原版制作(CDU毕业证书)查尔斯达尔文大学毕业证PDF成绩单一模一样
 
20240608 QFM019 Engineering Leadership Reading List May 2024
20240608 QFM019 Engineering Leadership Reading List May 202420240608 QFM019 Engineering Leadership Reading List May 2024
20240608 QFM019 Engineering Leadership Reading List May 2024
 
一比一原版(QU毕业证)皇后大学毕业证如何办理
一比一原版(QU毕业证)皇后大学毕业证如何办理一比一原版(QU毕业证)皇后大学毕业证如何办理
一比一原版(QU毕业证)皇后大学毕业证如何办理
 
Employment Practices Regulation and Multinational Corporations
Employment PracticesRegulation and Multinational CorporationsEmployment PracticesRegulation and Multinational Corporations
Employment Practices Regulation and Multinational Corporations
 
Enriching engagement with ethical review processes
Enriching engagement with ethical review processesEnriching engagement with ethical review processes
Enriching engagement with ethical review processes
 
Resource-mobilization-guide-for-community-based-organizations1.pdf
Resource-mobilization-guide-for-community-based-organizations1.pdfResource-mobilization-guide-for-community-based-organizations1.pdf
Resource-mobilization-guide-for-community-based-organizations1.pdf
 
原版制作(澳洲WSU毕业证书)西悉尼大学毕业证文凭证书一模一样
原版制作(澳洲WSU毕业证书)西悉尼大学毕业证文凭证书一模一样原版制作(澳洲WSU毕业证书)西悉尼大学毕业证文凭证书一模一样
原版制作(澳洲WSU毕业证书)西悉尼大学毕业证文凭证书一模一样
 
在线办理(Murdoch毕业证书)莫道克大学毕业证电子版成绩单一模一样
在线办理(Murdoch毕业证书)莫道克大学毕业证电子版成绩单一模一样在线办理(Murdoch毕业证书)莫道克大学毕业证电子版成绩单一模一样
在线办理(Murdoch毕业证书)莫道克大学毕业证电子版成绩单一模一样
 

CMH Security Summit 2014 - InfoSec Warrior

  • 2. Opinions and Legal Stuff • The opinions that I express in this presentation are my own and do not represent my employer(s) opinions. • Also, any advice given during this presentation is given without any legal regard. If you have questions that you are doing something illegal or doing something that you think can get you sued, please consult an attorney - do not call me!
  • 3. InfoSec Warrior This talk really started out as a spoof. I was talking about team challenges and using the Hasbro GI Joes to make talking points. Everything referred to ‘Yo Joe’ and ‘name dropped Duke, Scarlet, and SnakeEyes. Everyone on our team loved it, I hope that you do too!
  • 4. Special Operations Forces What we imagine … What is reality …
  • 5. Special Operations Forces • Physically Special Operations forces are well conditioned. There are no lazy SF team members. • Mentally the belief within this community is that you either have it or you don’t. • There is no ‘luck’ to selection. • What happens when we apply this to the InfoSec Community?
  • 6. Recruiting • As Information Security Professionals we are highly sought after. • You must always be of the mindset that you are always recruiting.
  • 7. Recruiting • The ideal candidate does not need to be university trained, but … they need to bring depth to the team. • What talent do they have that I don’t already have on my team? • “You must always be of the mindset that you are always recruiting.”
  • 8. Recruiting • Recruiting takes real effort! You must anticipate your needs. A good architect should help with this. • Recruiting requires understanding people; motives, wants, desires, and identifying character flaws.
  • 9. Team Building • Getting the right team; We all want to be on a ‘Dream Team’, but people get in the way. • Strong Leadership is required at all levels of the security team. Leadership at the smallest items really matter.
  • 10. Team Building • Define the Roles • Eliminate Overlap • Require Transparency • Improve Processes • Fill the Gap • Remove Obstacles • Think outside of the Box • Accept the Adaptability Requirement
  • 11. Training • IT IS THIS SIMPLE: You fight like you train! • Those who ‘wing-it’ will repeat the same task several times; hopefully they will get it right eventually.
  • 12. Training • Take Training Seriously • If your organization does not want to fund/train security staff expect poor results and continued poor behavior.
  • 13. Crisis Management • You Fight Like You Train! • When things go to hell in a hand basket, how will your team respond? • Do you actually expect your team to pass with flying colors? Are you being realistic with your expectations?
  • 14. Crisis Management • Mr Murphy will allows appear when he is least expected. • Your success at Crisis Management is dependent on on your recruiting, team building, and training. • Were you prepared?
  • 15. Sheepdogging (Mentoring) • People are classified as two groups, even within a pack: • Sheepdogs; those who watch over those who may run into trouble • Sheep; everyone else • Let’s face it, if you work in InfoSec you run a high risk of getting fired.
  • 16. Sheepdogging (Mentoring) • As a professional, you have a responsibility to mentor. • Ideally, your ‘mentee’ should be better than you in every respect. If you hoard knowledge, if your ‘mentee’ cannot surpass your technical skills, if your ‘mentee’ cannot out perform you .. then you have failed.
  • 17. Winning • Winning is a state of mind! • Winners will always find a way to achieve success, regardless of the situation. • Honorable winners can do this with class.
  • 18. Winning • Not all wins are pretty, wins can be ugly • Winning may very well be just surviving. • ie. Changing business landscapes may make your business attractive for merger & acquisition.
  • 19. Future Talk? • If you liked this talk, let me know. • I am considering talking about operationalizing F3AD for InfoSec needs. Possibly adding in “Cyber-Kill Chain” to the presentation. Purple Teaming would also be addressed.
  • 20. Contact & Shameless Plug •@fatherofmaddog •@bsidescolumbus Columbus BSides Conference Monday, January 19th, 2015 ~150 people showed up this year expecting ~180 in 2015