https://www.yourcyberpath.com/111/
\n\nIn this episode, Kip and Jason delve into the specific security design principle of Open Design.
\n\nOpen Design does not equate to open-source software but refers to transparency in revealing the mechanisms and inner workings of security controls.
\n\nThe hosts discuss the misconceptions surrounding Open Design, emphasizing that it does not require disclosing source code but rather the transparency of security mechanisms. They also stress that Open Design encourages outsiders to review and provide feedback, ultimately enhancing the security of the system.
\n\nKip shares an example of an inadequate disclosure of a company\u2019s security architecture which prompted him to switch to another vendor, which offered more transparency.
\n\nJason mentions the concept of "security by obscurity," and explains that while obscurity can provide some level of protection, it is not sufficient, as attackers can easily bypass such measures with scanning tools.
\n\nThe hosts suggest that getting involved in Open Design initiatives can help individuals break into the cybersecurity field and gain recognition, urging interested parties to participate in open standards development processes, such as the creation of industry certifications, to establish credibility and build their careers.
\n\nWhat You\u2019ll Learn
\n\n\u25cf\xa0\xa0\xa0\xa0What is open design?
\n\n\u25cf\xa0\xa0\xa0\xa0What are the common misconceptions surrounding open design?
\n\n\u25cf\xa0\xa0\xa0\xa0 What does the concept of \u201csecurity by obscurity\u201d mean?
\n\n\u25cf\xa0\xa0\xa0\xa0\xa0How can you break into cybersecurity with open design?
\n\nRelevant Websites For This Episode
\n\n\u25cf\xa0\xa0\xa0\xa0Akylade Certified Cyber Resilience Fundamentals (A/CCRF)
\n\n\u25cf\xa0\xa0Your Cyber Path
\n\n\u25cf\xa0\xa0IRRESISTIBLE: How to Land Your Dream Cybersecurity Position
\n\n\u25cf\xa0\xa0The Cyber Risk Management Podcast
\n\nOther Relevant Episodes
\n\n\u25cf\xa0\xa0\xa0Episode 92 - Password Managers
\n\n\u25cf\xa0\xa0 Episode 89 - Getting My First Job in Cybersecurity
\n\n\u25cf\xa0\xa0 Episode 82 - From Truck Driver to Cybersecurity Analyst