(Consulting) Couch to CISO: A Security Leader's First 100 Days and Beyond

Post on 19-Oct-2014

1.567 views 0 download

Tags:

description

:: History :: Security BSides DFW 2011 - November 5, 2011 (Philip J Beyer) - http://lanyrd.com/skymy :: Summary :: I will present details of how I transitioned from security consultant to program leader from vision to practice and planning for the future. :: Abstract :: If you want to go from a sedentary life to running a marathon, you have to have a plan. If you want to go from a consulting life to owning a security program, you also have to have a plan. Much like a 'Couch to 5K' running program, that plan will require vision, persistent effort, and a clear set of goals. I'll share my plan, what has worked so far and what didn't, and how you can design your own.

Transcript of (Consulting) Couch to CISO: A Security Leader's First 100 Days and Beyond

(Consulting) Couch to CISOA Security Leader's First 100 Days & Beyond

http://lanyrd.com/skymy

Philip J Beyer Information Security Officer Texas Education Agency

OverviewThe Premise Off the Couch Adopt a Plan Train Like You Mean It Enjoy the Race

http://lanyrd.com/skymy

The Premise

Consulting

Give advice Diverse experience No ownership

Running

Requires commitment Rewarding No one can do it for you

Assumptions

Couch to 5k programs are a dime a dozen Consultant to CISO programs are not Preparation and planning get your career in shape

Off the Couch

About Me

Consulting background Information Security Officer Runner

How Did I Start?

IT services Good record of delivery Received great advice

Where Are You Now?Skills

Leadership Management

Experience Delivery Presentation

Adopt a Plan

Your Career Plan

Near-term and long-term goals Specific activities, not nebulous dreams BHAG

A Plan Needs Vision

Big Hairy Audacious Goal Dream big Doesn't have to be attainable, just real and motivating

Track Progress

A plan without progress is not a plan Determine your milestones Zoom in when necessary

Train Like You Mean It

Mentor

Not a peer Not your manager Security (or business) leader

Resumé

Accomplishments... Not skills Teamwork... Not solo efforts

Build Habits

Manage yourself Optimize your research Shorten your summaries Be a translator (to business language)

Enjoy the Race

The Starting Line

100-Day Plan

Establish Order

Manage your projects Keep it simple The Pragmatic CSO

Don't Sprint

3.1 miles (5km) is a long distance You need to pace yourself Hands off the keyboard and onto the whiteboard

• This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License