I get to speak to a masters in cyber security class at a major university on Monday.

[viss@mastodon.social]

@Sempf @da_667 @DamonHD @jerry sure, its totally possible for people to be nerds and that not match their major. ive just encountered so many people with a 'masters in cybercyber' that dont have even basic experience, like installing an os or configuring a linksys its tainted the whole degree for me

[damonhd@mastodon.social]

@Sempf @da_667 @Viss @jerry An education and a time signature! B^>

[krypt3ia@infosec.exchange]

@jerry It’s when you “cyber” securely, e.g. door closed, lights off, all alone.

[kevinflynn@c.im]

@jerry
Risk, as a cost

[jan@social.eden.one]

@da_667 @jerry Walk the fine line between fearmongering and allowing the BoD to snooze.

[hotsoup@infosec.exchange]

@jerry I put on my robe and wizard hat… securely

[jerry@infosec.exchange]

@hotsoup I doubt anyone there will be old enough to understand that reference

[pesky_warlock@ioc.exchange]

@jerry Also generally, security risk frameworks don't align with financial risks. To quote Jacquith, how do controls relate to business value? This is the problem they're going to have to solve.

[noplasticshower@infosec.exchange]

@jerry have you read the CISO Report?

https://www.garymcgraw.com/wp-content/uploads/2018/01/CISO-2017.pdf

[jjbaumgartner@infosec.exchange]

@jerry @hotsoup Damn it, that means I'm the same age as old people.

[kwayk42@sechtor.social]

@jerry going all philosophical

[cali@infosec.exchange]

@hotsoup @jerry “I cast lvl 3 eroticism..”

[bagmangood@infosec.exchange]

@jerry if it is a professional focus - maybe something along the lines of "it is about influencing people, not saying no to them"