Enjoying My Blissful Ignorance of Cyber Vulnerabilities

This week's episode of CISO/Security Vendor Relationship Podcast

Enjoying My Blissful Ignorance of Cyber Vulnerabilities

This week's episode is hosted by me, David Spark, producer of CISO Series and Mike Johnson. Our guest is Dustin Wilcox, CISO, Anthem. All three of us discussed:

Propagating and believing in InfoSec myths can be dangerous to your cyber health.Believing that you can spot a phishing scam and that you're safe just as long as you go to mainstream sites are both fallacies. Ever been tricked by a magician? Then guess what, you can be tricked by a phishing email. They're designed to look just like normal emails. And mainstream sites have modules of third parties that may not have such stringent security standards.

Sell your company in your job description. A lazily written job description will speak poorly to your company's employer brand. Far too many job descriptions are an amalgamation of previous jobs, stolen from other job descriptions with poor to little editing, and/or they come off as an endless wish list and therefore ward off qualified candidates. Make it clear what requirements are and what's a bonus. And then spend a significant amount of time selling your company. If you want talent, you're going to need to really make a convincing argument to come work for your company.

We're not going to be able to hire our way out of the current debt of security talent.You've seen the seemingly impossible statics that claim that we're well over a million or maybe two million short of cybersecurity professionals. Closing that gap is not a possibility especially as it's always growing wider. The answer is to still hire more cybersecurity talent, but to augment it by building a staff that's cyber savvy.

Read more: https://cisoseries.com/enjoying-my-blissful-ignorance-of-cyber-vulnerabilities/

Tags 🏷
#cybersecurity #cso #ciso #infosec #hacker #itriskmanagement #ciberseguranca #cyberattacks #threats #malware #cibercrime #exploit #hackers #hacker #breach #mitreatt&ck #pentesting #cloudsecurity #cyberwar #datasecurity #ethicalhacking #hacking #cloud #informationsecurity #securitymanagement #infosec #ransomware #datasecurity #cisoseries