In decades past, cybersecurity professionals spent a lot of their time warning organizations away from bleeding-edge technology. As a group, we’re inherently nervous around new technology. It’s unproven, it has bugs, there’s no basis for trust, and sometimes it violates or pushes back on traditional boundaries and best practices.
Traditionally, you were a fool to rush into new technology, but these days… would you be a fool not to?
Modern businesses are hyper-aware of the competitive advantages emerging technology can give. While every new technology doesn’t become an advantage, organizations in many industries can’t afford to wait and see before experimenting with it.
This talk will explore the cybersecurity professional’s role in each of the five stages of adoption, from innovators to laggards. The talk will also explore what we can do to better guide our employers and clients to make safer and more informed decisions as they try to balance the growth and stability of their businesses.
I'm trying to figure out what to call a cybersecurity professional who adopts new technology to better understand how to secure it, before the general population adopts it?
First, let's focus more on that word, "Adoption".Intuitively, you're probably aware that there are folks who quickly adopt new technology.They love preordering stuff and spending time on Kickstarter looking for interesting new products to fund.
Crossing the Chasm author"Crossing the Chasm is closely related to the technology adoption lifecycle where five main segments are recognized: innovators, early adopters, early majority, late majority and laggards"https://en.wikipedia.org/wiki/Crossing_the_Chasm
Understanding how organizations adopt new technologies is crucial for cybersecurity professionals hoping to aid in the process and help support safer, more risk-informed decisions.
Now, let's talk about the next challenge: SPEED
Why so fast?Reduction of frictionReducing friction is great for adoption, but can often create challenges for security folksNo one wants to be the one putting the friction back in, so we have to get creative!What if the more secure option offered less friction?Complex 24 character password or biometrics?
Hands on how many folks have tried out ChatGPT, Bard, Claude or other generative AI chatbots?
How many have used it for work?
On a regular basis?How do you like it? (pick a few folks to speak up)
Don't get me wrong - I'm not saying we should be treating everything new as the next best thingA lot of it is going to be insecure garbage that's destined to fail 18 months inBut I do now have an Apple Watch.I kept testing and researching new smartwatch models.Finally, it felt like the benefits of using a Pebble was outweighed by new tech (better health and fitness sensors especially)But there's still a downside to leaving behind my 7-year old smartwatch brand: charging once a day instead of once a week
Story time!
I was one of the first beta Amazon Echo customers
I was able to quickly confirm that it’s not sending back data all the time, confirming it was not recording everything we say
I was also able to report that it did some really weird, unexplainable stuff that made it seem less trustworthy
Add more examples after this?
Story time!
I was one of the first beta Amazon Echo customers
I was able to quickly confirm that it’s not sending back data all the time, confirming it was not recording everything we say
I was also able to report that it did some really weird, unexplainable stuff that made it seem less trustworthy
Add more examples after this?
AI made several of the slides in this presentation. A few of them, I didn't touch at all - Beautiful.ai nailed itI should share some resources. Maybe a handout?