start	end	text
5330	10450	So here we are at the end of the first day of the Career Hacking Village and I hope everyone has
10450	17530	had a great time. We were so thankful that one of our partners came up with this idea about looking
17530	24610	at what the future of the workforce would be about and how we can future-proof our careers.
24610	30770	We're definitely in a time of a lot of change and a lot of uncertainty and it is always good
30770	35790	to be thinking about what are the next steps and what can we be doing now to think about
35790	42250	future-proofing our career. I'd like to introduce Janai Marikovic and she has some great thoughts
42250	48050	for us to think about. Janai? Hi Kathleen, thank you very much. I really appreciate you giving me
48050	54510	the opportunity to talk about a topic that is near and dear to my heart. The title of today's lecture
54510	59510	is Future-proofing Your Career in the Age of the Intelligent Ecosystem and some of the skills that
59510	65250	we're going to need to build up this what we'll call an augmented workforce from the ground up.
65330	71010	Just a little bit of background about myself. I'm a Chief Information Security and Chief
71010	76670	Technology Officer for a company called Tyro Security. I've been doing cyber security for
77270	84870	20 years now and I've been a CISO for the last seven or eight. I've worked in a multitude of
84870	92090	different industries including media, entertainment, live sports, gaming. I've also worked in manufacturing,
92090	100350	healthcare, and robotics. I've got some extensive experience building cyber security
100350	106230	capabilities from the ground up. So everything from security, architecture, engineering, forensics,
106230	111890	and defense. I actually also had the opportunity to invent a cyber defense framework based on
111890	118090	American football. And I've worked for companies such as DirecTV, Electronic Arts, Beckman Coulter,
118090	131020	and investigation firms like Kralogera. So we are in what's called the fourth industrial revolution
131020	138120	and really what that is is it's this time marked by an interconnection of the physical, the biological,
138120	143960	and the digital worlds. And when these worlds integrate the way that they are today, it gives
143960	150700	rise to what we call big bang disruptions and ultimately transform entire systems.
153340	157500	The accompanying pace of technological development is going to be exerting this
157500	163080	profound change in the way that we live, the way that we work. It's going to impact all disciplines,
163080	173600	all economies, and all industries. So when these worlds mesh, you end up with what's called
173600	180140	distributed thinking. And that's where if everything is hyper-instrumented with sensors,
180140	185500	and these sensors have things like onboard artificial intelligence, and again they're
185500	190680	crossing multiple worlds, the digital, the biological, and the physical world, you end
190680	200790	up giving rise to this thing called distributed thinking. So what is an intelligent ecosystem?
200790	207550	It's heavily instrumented sensor networks that are integrated across this mesh of all three worlds,
207550	214070	so the digital, the biological, and bio networks. And it's accessible via natural user interfaces,
214070	219750	so think voice, gesture, and they leverage cognitive systems that ultimately make these
219750	226990	real-time decisions at the sensor level. And this all occurs across blockchain-enabled networks.
227710	231830	And so with all of this, at the end of the day, all roads ultimately, you know,
231830	240070	lead through cybersecurity. And we have our work cut out for us. Attackers are better at adapting to,
240070	246350	leveraging, and exploiting disruption. We operate in a world bound by rules. Their limits,
246350	252190	quite frankly, are their own creativity. And our ability to predict and prepare is more critical
252190	258090	than ever to deeply understand the forecasts and the trends that'll mold and shape the world
258090	264010	of tomorrow. So as cybersecurity professionals, quite frankly, we don't often fully understand
264010	269210	how these near and long-term technology trends culminate. We don't think, like world builders,
269210	275150	we don't think in universes. And as a result, we end up with these disjointed, unnatural approaches
275150	282590	to cybersecurity design, from everything from the cybersecurity worker's user experience to these
282590	287150	slow, debt-laden, and friction-laden enterprise security architectures.
290530	296790	So designing for cybersecurity of the future requires a willingness for us to explore how
296790	301390	these technical trends are going to manifest into this future world. And so what are some of the
301390	306210	iterative steps that we can take that will help us both operate in this world comprised of
306210	316100	intelligent ecosystems and how to protect and defend it? And since user-centric design starts
316100	322400	with the user, it's time that we consider the cybersecurity professional and our user experience
322400	329640	first. So there's this wonderful quote from Accenture, and it's, in the future, people don't
329640	334670	want more technology in our products and services. We actually want technology that is more human.
334670	341970	And technology-driven interactions are creating and expanding technology identity for the consumer.
341970	346990	And this living foundation of knowledge will be key not only to us understanding the next
346990	352510	generation consumers and, quite frankly, security users, but delivering these rich,
352510	359470	individualized experiences based on relationships in this post-digital age.
360030	365130	One of the quotes that I like is from Steve Jobs, and he was at a conference called D5,
365130	370830	and he said, I just want Star Trek, give me Star Trek. And why is that? Well, it's because technology
370830	376650	experiences in Star Trek are natural and oftentimes invisible and transparent. Tech is built into the
376650	383750	fabric of the ecosystem. And the ultimate trajectory is building these humanized technologies,
383750	389590	ecosystems that sense, that feel, that think, intelligent ecosystems. But to engage in predicting
389590	395890	the future, we need to take a look at how all of this is ultimately going to impact us.
396930	403050	And so these next generation security systems are going to leverage human-centered designs that
403050	409210	intersect with empathy and creativity, with consideration for us as the end user.
409210	414630	They're going to be accessed via these deeply personalized and anticipatory interfaces using,
414630	417910	like I mentioned before, natural language and voice.
420250	426670	And they are going to culminate into these role-based and purpose-based digital assistants
426670	431610	that are ultimately going to help us navigate employees through decision-making processes
432170	436250	and the explosion of data in these intelligent ecosystems.
437450	445050	And so as the AI and the cognitive solutions evolve in sophistication, you know, technology,
445050	450150	we too as cybersecurity professionals, we've got to figure out how ultimately that's going to affect
450150	455710	our jobs. How is it going to affect our work? What is, what's our work going to look like in
455710	461030	the future when the majority of our workload is automated? What are the skills that are necessary
461030	466610	to operate in these blended worlds where security professionals are working alongside assistants or
466610	475610	robotics? So we're going to have to learn how to operate faster. We're going to have to be capable
475610	481830	of applying new skill sets rapidly. There's going to be a change in the way that we deal with our
481830	487850	skills and we're going to have to learn, you know, a set of skills that place higher value on our
487850	492530	people skills, our business intelligence, our independent thinking, innovation, and especially
492530	500890	around creativity. So building the next generation security worker. So in this next section, we're
500890	508310	going to talk about some of the six sets of skills that I kind of wanted to delve into. I'm sure
508310	515310	through many other lectures, we've talked about, you know, traditional cybersecurity skills that
515310	520910	you need in order to move on to your next role or even some of the human skills such as
521490	526810	presentation and empathy and so forth. I wanted to take a little bit of a different tack
526810	531590	and focus in on skills that I believe security people are going to need
532070	537670	if you're operating in a world where much of our work has already been automated away.
539430	546230	So I broke the skills into two different areas. One are STEM skills and the other one is what
546230	553070	we'll call human skills. So the first one is artificial intelligence. So this is very
553070	558650	meaningful to me. In fact, I felt so strongly about this when I was working at a design firm
558650	566130	as their CTO. We designed a set of artificial intelligence training for everybody in the company.
566130	569830	As cybersecurity professionals, we're dealing with a couple of things here.
569830	576150	One, you're expected to protect and defend systems that have machine learning built into them.
576150	584370	So from the security architecture and design phase, to the way that we instrument and monitor
585550	589570	attacks against systems that have machine learning built into them,
589570	593470	to the way that you do digital forensics within these systems.
593470	599270	You have to have a foundational knowledge and understanding of AI in order to be able to do
599270	605630	your future job. But the other is that with the augmented workforce, you're working alongside
605630	611590	digital assistants. We already see this in industries such as supply chain and customer care,
611590	618310	where people have digital assistants, or in some cases robotics, that are working alongside and
618310	624070	taking over a lot of the day-to-day activities that they, quite frankly, are able to do through
624070	631570	automation. So in building and designing these systems, it's really key and critical for security
631570	640570	users to understand AI, not just from a basic level, but I would say ultimately through a mid-level.
642890	649590	The next are biological systems. So we already mentioned earlier that there's this intersection
649590	654710	between the physical, the digital, and the biological worlds, everything that comprises
654710	660730	the fourth industrial revolution. And so we're going to be working in worlds where you're expected
660730	667990	to design the cybersecurity controls and embedded biological devices. So example,
667990	673950	think of embedded medical tattoos. Think of ingestible robots as an example,
673950	678950	medications that have like nanobots and so forth that are built into it. And we're going to be
678950	684610	expected to design the security into those and to other bio interfaces and to wearables.
684630	690790	And so understanding that if those systems get compromised, what is going to, what can be the
690790	696930	impact to the human is going to be key. But it's actually a little bit more than that. You know,
696930	702850	the world's been around for what four and a half billion years and biological systems have had the
702850	708750	chance to evolve. And I already mentioned earlier that we oftentimes as security people don't think
708750	717110	in ecosystems, we don't think in world building. And so if we want insight, if you want create,
717110	724210	you know, insight into the way that you can approach building security holistically,
724210	729570	you can look at biological systems. A couple of examples, the human immune system. There
729570	735230	are several books out there that talk about human immune system architecture. And when we look at
735230	740930	the way that we design security systems, we oftentimes don't do it very holistically.
740930	746730	And so if you look at the construction of a human immune system and you correlate that,
746730	752250	there's a lot of insight that you can get from there. A couple of quick examples are,
752250	757550	it's frictionless and transparent. When your immune system goes off, it's because there's
757550	763050	something bad that's happening. You don't wake up in the morning thinking about your immune system.
763050	771670	Yet, those are the actions that we expect of end users when we design security systems for them.
771730	778010	So, you know, the future design of cybersecurity systems needs to be, you know, more transparent
778010	783730	and a lot less friction, you know, to the end user. There's insight into biological systems
783730	788790	in terms of the way that animals communicate with each other. And you can take insight from there.
788790	795330	There's, you know, just when you look at everything from ecosystem, terrestrial ecosystem design,
795330	799830	you can take inspiration from that in terms of the way that you approach the design of
799830	806850	cybersecurity. So both because we're going to be operating and designing cybersecurity into
806850	813810	biological systems, and because there is insight that can be gained from biological systems,
813810	819950	I highly recommend becoming more competent in biological systems is a skill that
819950	829630	we're going to see cybersecurity people need to do. User experience design. So I talked a little
829630	834990	bit earlier about what does the design currently, what does the user experience look like for a
834990	840390	cybersecurity professional? We've all experienced it. It doesn't matter what your role is, you're
840390	847310	in it at 100 applications plus. The context switching that we have to do is astronomical.
848230	854010	It adds a lot of friction to the process. It adds a lot of time to the process. And when you're
854010	860270	dealing with attacks that, you know, operate rapidly, and again, attacks that can cross
860270	866930	multiple worlds, then time is absolutely of the essence. And yet, and still, when we look at the
866930	872910	way that security architectures are designed for us as end users, they're problematic.
873210	877830	Oftentimes, you have to click through multiple screens in order to be able to get anything done.
877830	885090	They are not designed with the care that you design, you know, interfaces for, say, for
885090	891270	consumers. And so, since the future of our applications are going to have these voice
891270	898710	interfaces, these digital assistants built into it, we as security professionals understanding
898710	906070	how to design user experiences is important to us. But it's also important to end users.
906070	912690	When we think about what we ask of end users, you know, we don't oftentimes understand, you know, the
912690	918170	full experience that they have as part of their journey. And the things that we're asking them to
918170	925190	do as part of their day-to-day activities, or within the applications themselves, don't oftentimes
925190	932950	follow the best user experience for that individual. And so, understanding how to do UX
932950	939650	or user experience design, understanding how to map out user journeys and build security into them,
939650	949690	I think it's going to be an absolute key experience. Creativity and design. So,
949690	958170	creativity is still one of those skills that humans outperform machines. And so,
958170	964630	our ability to think outside of the box, our ability to apply creative processes to things
964630	968950	are going to be critical, especially in the world of cybersecurity. We're going to see
968950	974670	attacks, and we're going to see breaches, unlike anything we've seen in the past. Which means that
974670	981290	we're going to have to leverage different types of experiences and different ways of doing things,
981290	987990	far different than anything that we've done in the past. And so, a proper education and training in
987990	993850	the world of design, and a proper education and training in the world of creativity and things
993850	1000450	like design thinking, I think are skills that we're going to have to see not only in STEM careers,
1000450	1006450	but definitely in the world of cybersecurity. We've already mentioned that attackers are really
1007130	1012310	bound only by the limits of their creativity, which means that we need to meet creativity
1012310	1022760	with creativity. Storytelling. One of the key things that we're going to have to build
1022760	1029500	as a workforce is our ability to communicate. Security people are oftentimes very good
1029500	1035300	at communicating with other technical people. But when we get outside of the technical realm,
1035300	1041500	and we start interfacing with our colleagues, when we interface with users, when we interface
1041500	1048220	with our management, when we interface with the board of directors, we think we are communicating
1048220	1055020	one way. Unfortunately, our audience is interpreting it a very different way.
1055120	1062280	And so, understanding how to storytell is going to be one of the key skills in terms
1062280	1069020	of communication and persuasion, quite frankly. Negotiation skills are predicated also on your
1069020	1074960	ability to storytell. Humans have been storytelling as a way to communicate information since the
1074960	1083440	beginning of time. And being able to reach into some of those ancient skills that we have.
1083440	1089300	And understand how to communicate these very difficult topics using mechanisms such as
1089300	1095520	storytelling. And understanding things like the hormones behind storytelling. The way that you
1095520	1102600	tell specific stories in order to elicit certain reactions that actually have hormonal responses.
1102600	1111600	And get the person to either feel like there's a call to action or have empathy with you as the
1111600	1118680	storyteller. All of that is predicated on our ability to be able to tell a good story. So,
1118680	1124600	storytelling is absolutely one of the key skills that we're going to have to build.
1126140	1135120	And empathy. So, empathy is I think oftentimes an underrated skill. And it's because we oftentimes
1135120	1142060	believe that you have it or you don't. And being able to build a bond with our users. In fact,
1142060	1150260	key to storytelling is our ability to be empathic. And so, if we're expecting our users,
1150260	1158460	our colleagues, if we're expecting management to understand what we're trying to communicate,
1158460	1164760	then we also have to be able to look at the world through their eyes. We need to look at the world
1164760	1171460	through the lens of where they're coming from. If we're trying to do proper user experience design,
1171460	1178200	that is predicated on empathy. If you're trying to do creative design, it is predicated on empathy.
1178690	1184100	So, everything that we do in the world of cybersecurity when we're trying to communicate
1184100	1192060	out and get people to align with us or take specific actions is our understanding of how to
1192060	1199180	look at the world through their lens unbiased. And work through designing solutions that ultimately
1199720	1208680	allow all of us to be able to work together. So, I wanted to end on this. And that's a call
1208680	1217320	to action. One of the, you know, as security professionals, you know, one of the things that
1217320	1226620	we really need to focus on is demanding oftentimes that the industry as a whole start looking at
1226620	1234180	security experience design end to end and holistically. So, everything from the way that
1234180	1240220	we interface with applications so that when you're instead of having to interface with 100
1240220	1247000	different applications, you're working with digital assistants that are capable of automating a lot
1247000	1252680	of the work and then representing the information to us in a way that makes in a way that ultimately
1252680	1260960	makes sense and makes our jobs easier is absolutely key. Expecting the people who design for us to
1260960	1266380	start thinking about, you know, our lives holistically end to end and not just trying
1266380	1271300	to solve this one problem with this one piece of technology, but understanding the stressors that
1271300	1277580	security people deal with and, you know, what their lives look like in the context of trying to
1277580	1284980	do this work is absolutely key. And so, I wanted to have a call to action that we demand more from
1284980	1289800	our vendors. That when they're designing for us, that they design as if they're designing for
1290020	1295400	a consumer. So, when we look at things like digital assistants and the way that digital
1295400	1301980	assistants have been built for consumers, why that type of experience can't be built for cyber
1301980	1311160	security needs to stop. We need to start demanding that proper UX design, that, you know, things like
1311160	1318780	natural user interfaces, that futuristic technology gets embedded into our user experience so that at
1318780	1325560	end of the day, you know, we're able to deliver the protection and defense services to our,
1325560	1330740	you know, to our companies and to the people that we're responsible for protecting.
1330740	1336800	And I wanted to thank you for giving me the opportunity to talk about, you know,
1336800	1343920	intelligent ecosystems, some of the human and STEM-based skills that I'd like to predict that
1343920	1350060	we're going to need in order to operate in this future world. And thank you very much and enjoy
1350060	1351560	the rest of the conference.
1352060	1355740	Janine, thank you so much. That was really inspiring and sort of
1355740	1363760	really turning our heads around as far as, you know, we tend to push a lot as far as you need
1363760	1369780	this certification, you need to know this language, you need to know, you know, sort of hard science
1369780	1375460	kind of skills. And some of the things that we've been talking about over the last year or so has
1375460	1381040	been the skills that people learn when they're volunteering in conferences, learning how to
1381040	1388560	better communicate, learning how to be empathetic and the way you are practicing your empathy is by
1388560	1394920	being a volunteer and dealing with people from different cultures and different backgrounds and
1394920	1401720	understanding that you do have the capacity to be empathetic. You just need to learn how to
1401720	1409320	use it and constantly practice it. So these are really great, great pieces of information. I know
1409500	1415180	a lot of people will be talking to our career coaches over, you know, today and tomorrow. And
1415180	1421460	I think that this is something that we can really touch on as far as what are the other skills that
1421460	1426840	everyone should be looking at as they develop their career. So thank you so much for this and
1426840	1433220	everyone have a great evening and we will see you all tomorrow at the Career Hacking Village.
1433220	1434740	Thank you. Thank you.
