My Life on the Infosec D-List - Andrew Hay

13
BSid San Franc#co March 2, 2010 Monday, March 8, 2010

description

People new to information security often find themselves wondering how to make a name for themselves in the industry. Andrew Hay has lived most of his career on the D-list but has worked hard to increase his status in the hopes of someday landing that coveted A-list position. Through this talk we'll discuss how to expand your circle of influence, how to build your personal brand, and how to move up from the dreaded Infosec D-List. (might need to change this a bit but you get the general idea).

Transcript of My Life on the Infosec D-List - Andrew Hay

Page 1: My Life on the Infosec D-List - Andrew Hay

BSi

des S

an F

ranc#c

o

Mar

ch 2

, 201

0

Monday, March 8, 2010

Page 2: My Life on the Infosec D-List - Andrew Hay

Who’s the Guy in the Dress?• Why that devastatingly

handsome man is Andrew Hay!

• Blogger

• www.andrewhay.ca

• Published author

• www.andrewhay.ca/books

• All around nice guy

Monday, March 8, 2010

Page 3: My Life on the Infosec D-List - Andrew Hay

What is the D-List?

Few celebrities in the information security industry

Many of us are relegated to obscurity on day one of our security careers

Some are happy while others work to claw their way out of obscurity

Monday, March 8, 2010

Well, the idea came up at a conference (I can’t recall which one) that there were very few celebrities in the information security industry. As such, many of us are relegated to the D-List on day one of our security careers.

Though some are happy to sleep in the “career basement”, others work to claw their way to the top and out of obscurity. That, boys and girls, is the story of how the D-List came to be.

Page 4: My Life on the Infosec D-List - Andrew Hay

• Very few people consider themselves “A-List”

• Many people think they’re higher than “D-List”

• Some don’t even think they’re worthy of “D-List” status

Who’s Who In the Subjective Zoo?

1%5%10%

84%

A-ListB-ListC-ListD-List (a.k.a. Everyone Else)

Note - 47% of all statistics are made up at least 75.2% of the time.

Monday, March 8, 2010

Page 5: My Life on the Infosec D-List - Andrew Hay

Who’s A-List?

Monday, March 8, 2010

Everyone in this room should be able to name someone they consider an “A-List” information security celebrity.

Page 6: My Life on the Infosec D-List - Andrew Hay

Who’s B- and C-List?

Monday, March 8, 2010

The “B-List” and “C-List” is sometimes even more subjective. Many people think that they’re in this range. Sometimes it’s driven by ego, sometimes by accomplishments, but, in reality, you’re at this level when your peers and “the industry” agree you are.

Page 7: My Life on the Infosec D-List - Andrew Hay

Who’s D-List?

Monday, March 8, 2010

What about the “D-List”? Who of you feel that you fall onto the “D-List”? Odds are, if you think you are then you probably are. But is this really a bad thing?

Page 8: My Life on the Infosec D-List - Andrew Hay

Strength in Numbers?

D-

IS TL !

Monday, March 8, 2010

Page 9: My Life on the Infosec D-List - Andrew Hay

Knowing where to start is hard...

Monday, March 8, 2010

Knowing where to start is hard, there is no question about it.

Page 10: My Life on the Infosec D-List - Andrew Hay

In the Beginning...

Monday, March 8, 2010

In the beginning, if you are like me, you don’t really know how to get started in information security.

Page 11: My Life on the Infosec D-List - Andrew Hay

Blogging & Writing

Conferences, Gatherings &

Groups

Social Networking

Online Communities

Monday, March 8, 2010

Starting a blog is an easy way to to get you and your message out there.

Writing articles, books, and papers are another way.

Page 12: My Life on the Infosec D-List - Andrew Hay

Proud D-Lister’s

Monday, March 8, 2010

Page 13: My Life on the Infosec D-List - Andrew Hay

Questions?

Andrew Hay Email: [email protected]: www.andrewhay.caPhone: (403) 360-6367

Monday, March 8, 2010