On today's episode, we're breaking down phrases you've heard a million times: \u201csecurity is everyone\u2019s job,\u201d \u201chumans are the weakest link in the security chain,\u201d \u201cit\u2019s not if you get breached, but when.\u201d Returning guest Alyssa Miller drills into these comforting nostrums and explains why, even when they\u2019re used for well-intended purposes, they often act to limit the conversation and the options, rather than address the hard work needed to overcome these evergreen problems. You\u2019re not going to want to miss this one, folks! It\u2019s all that, plus a little bit of book talk, today on Cyber Work!
\u2013 Start learning cybersecurity for free: https://www.infosecinstitute.com/free
\u2013 View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcast
\u2013 Get the Cybersecurity Career Guide by Alyssa Miller: https://alyssa.link/book
0:00 - Intro
1:38 - Alyssa's tweet that inspired this episode
4:00 - Why you need to read the Cybersecurity Career Guide
9:10 - Cybersecurity platitudes and clich\xe9s
11:30 - Clich\xe9 1: "It's not if you get breached, but when"
18:44 - Clich\xe9 2:"Just patch your shit"
24:58 - Clich\xe9 3: "Users are the weakest link"
32:34 - Clich\xe9 4: "Security is everyone's job"
35:52 - Clich\xe9 5: What is a "quality gate"?
44:14 - Clich\xe9 6: "You just need passion to get hired"
48:14 - How to write a better cybersecurity job description\xa0
50:15 - Business value of diversity and inclusion
52:52 - Building a security champions program
55:12 - Where can you connect with Alyssa Miller?
56:44 - Outro
About Infosec
Infosec believes knowledge is power when fighting cybercrime. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and privacy training to stay cyber-safe at work and home. It\u2019s our mission to equip all organizations and individuals with the know-how and confidence to outsmart cybercrime. Learn more at infosecinstitute.com.