Information Security Education

Having stuff like: security awareness campaigns, critical IT security staff, human security vulnerability and behavioral process analysis there may be an easy conclusion such as : education. Obviously it works on several layers  – IT Security pros need to learn continuously – be one step ahead of threats and attackers  -  and end-user should be informed and protected whole time. There are perhaps many books about IT Security Metrics, articles and things mentioned before, but here I would like to focus on security training. We know, that IT Security is a quite wide field of knowledge (developing, changing, …) , combining networking, programming, mathematic, OS’es, and many others specialization – but the questions are, how to be on top and protect company, how to handle self-development, how to manage knowledge flow in team? Probably guys from management, leaders have some ideas and philosophy for handling such issues. On the other hand, what can be done from perspective of each security analyst or specialist is self-study, self-motivation, encouragement for team mate, being proactive and willingness to be involved.  The whole time  – remember the Red Queen Effect?

In my humble opinion there are several ways to live with IT security in mind, develop technical/soft skills every day and have positive attitude to work.  I like to think about it as a place, in which  being smart or educated in not enough (or not the most important) , but having heart and passion.

online lectures - self education

      Security Awareness

This is foundation, baseline and may be developed and repeated all the time. Conferences, online trainings (general-purpose), security blogs, free-talks, presentations .etc Basically I suppose that on general subjects the most time should be spent. Possibly, work-teacher would be the best person to have and ask for help.

      Specialization

Choose what is the most interesting part of security for you and dedicate time and effort to it. Look for literature, websites, certificates and trainings. Plan your own projects.

       Be updated

All knowledge is useless when out-dated. Look for webinars, presentations and follow-ups. Find informational web-pages, subscribe and be engaged. Again, having opportunity to work in big security company is always the best option.

      Share your experience

Motivate your team-colleagues, have educational-meetings, prepare great documentation , be engaged and open-minded.  Exercise soft-skills, communication and cooperation. 

professional trainings - specialization

More than enough is too much, so never forget about 'healthy' attitude, systematic approach, and obligatory rest. Eventually ... protect your dream.