WEBVTT 00:05.330 --> 00:11.850 So here we are at the end of the first day of the Career Hacking Village and I hope everyone has had a great time. 00:11.850 --> 00:24.610 We were so thankful that one of our partners came up with this idea about looking at what the future of the workforce would be about and how we can future-proof our careers. 00:24.610 --> 00:37.770 We're definitely in a time of a lot of change and a lot of uncertainty and it is always good to be thinking about what are the next steps and what can we be doing now to think about future-proofing our career. 00:37.770 --> 00:43.450 I'd like to introduce Janai Marikovic and she has some great thoughts for us to think about. 00:43.450 --> 00:44.310 Janai? 00:44.690 --> 00:46.590 Hi Kathleen, thank you very much. 00:46.590 --> 00:53.110 I really appreciate you giving me the opportunity to talk about a topic that is near and dear to my heart. 00:53.210 --> 01:05.250 The title of today's lecture is Future-proofing Your Career in the Age of the Intelligent Ecosystem and some of the skills that we're going to need to build up this what we'll call an augmented workforce from the ground up. 01:05.330 --> 01:08.510 Just a little bit of background about myself. 01:08.530 --> 01:14.810 I'm a Chief Information Security and Chief Technology Officer for a company called Tyro Security. 01:14.810 --> 01:22.790 I've been doing cyber security for 20 years now and I've been a CISO for the last seven or eight. 01:22.790 --> 01:29.770 I've worked in a multitude of different industries including media, entertainment, live sports, gaming. 01:29.830 --> 01:34.210 I've also worked in manufacturing, healthcare, and robotics. 01:34.810 --> 01:43.250 I've got some extensive experience building cyber security capabilities from the ground up. 01:43.250 --> 01:47.130 So everything from security, architecture, engineering, forensics, and defense. 01:47.130 --> 01:53.330 I actually also had the opportunity to invent a cyber defense framework based on American football. 01:53.330 --> 02:01.490 And I've worked for companies such as DirecTV, Electronic Arts, Beckman Coulter, and investigation firms like Kralogera. 02:07.640 --> 02:19.740 So we are in what's called the fourth industrial revolution and really what that is is it's this time marked by an interconnection of the physical, the biological, and the digital worlds. 02:19.740 --> 02:30.700 And when these worlds integrate the way that they are today, it gives rise to what we call big bang disruptions and ultimately transform entire systems. 02:33.340 --> 02:41.100 The accompanying pace of technological development is going to be exerting this profound change in the way that we live, the way that we work. 02:41.100 --> 02:45.480 It's going to impact all disciplines, all economies, and all industries. 02:50.040 --> 02:55.280 So when these worlds mesh, you end up with what's called distributed thinking. 02:55.280 --> 03:14.420 And that's where if everything is hyper-instrumented with sensors, and these sensors have things like onboard artificial intelligence, and again they're crossing multiple worlds, the digital, the biological, and the physical world, you end up giving rise to this thing called distributed thinking. 03:17.850 --> 03:20.790 So what is an intelligent ecosystem? 03:20.790 --> 03:30.330 It's heavily instrumented sensor networks that are integrated across this mesh of all three worlds, so the digital, the biological, and bio networks. 03:30.350 --> 03:41.950 And it's accessible via natural user interfaces, so think voice, gesture, and they leverage cognitive systems that ultimately make these real-time decisions at the sensor level. 03:41.950 --> 03:46.990 And this all occurs across blockchain-enabled networks. 03:47.710 --> 03:53.270 And so with all of this, at the end of the day, all roads ultimately, you know, lead through cybersecurity. 03:54.850 --> 03:57.390 And we have our work cut out for us. 03:57.510 --> 04:02.390 Attackers are better at adapting to, leveraging, and exploiting disruption. 04:02.570 --> 04:05.530 We operate in a world bound by rules. 04:05.530 --> 04:08.230 Their limits, quite frankly, are their own creativity. 04:08.230 --> 04:19.330 And our ability to predict and prepare is more critical than ever to deeply understand the forecasts and the trends that'll mold and shape the world of tomorrow. 04:19.570 --> 04:27.210 So as cybersecurity professionals, quite frankly, we don't often fully understand how these near and long-term technology trends culminate. 04:27.210 --> 04:30.990 We don't think, like world builders, we don't think in universes. 04:31.030 --> 04:47.150 And as a result, we end up with these disjointed, unnatural approaches to cybersecurity design, from everything from the cybersecurity worker's user experience to these slow, debt-laden, and friction-laden enterprise security architectures. 04:50.530 --> 05:00.310 So designing for cybersecurity of the future requires a willingness for us to explore how these technical trends are going to manifest into this future world. 05:00.310 --> 05:09.530 And so what are some of the iterative steps that we can take that will help us both operate in this world comprised of intelligent ecosystems and how to protect and defend it? 05:13.640 --> 05:23.360 And since user-centric design starts with the user, it's time that we consider the cybersecurity professional and our user experience first. 05:24.640 --> 05:32.320 So there's this wonderful quote from Accenture, and it's, in the future, people don't want more technology in our products and services. 05:32.320 --> 05:34.670 We actually want technology that is more human. 05:34.670 --> 05:41.970 And technology-driven interactions are creating and expanding technology identity for the consumer. 05:41.970 --> 05:59.470 And this living foundation of knowledge will be key not only to us understanding the next generation consumers and, quite frankly, security users, but delivering these rich, individualized experiences based on relationships in this post-digital age. 06:00.030 --> 06:07.830 One of the quotes that I like is from Steve Jobs, and he was at a conference called D5, and he said, I just want Star Trek, give me Star Trek. 06:07.930 --> 06:09.190 And why is that? 06:09.190 --> 06:15.670 Well, it's because technology experiences in Star Trek are natural and oftentimes invisible and transparent. 06:15.670 --> 06:18.470 Tech is built into the fabric of the ecosystem. 06:18.790 --> 06:28.230 And the ultimate trajectory is building these humanized technologies, ecosystems that sense, that feel, that think, intelligent ecosystems. 06:28.230 --> 06:35.890 But to engage in predicting the future, we need to take a look at how all of this is ultimately going to impact us. 06:36.930 --> 06:49.210 And so these next generation security systems are going to leverage human-centered designs that intersect with empathy and creativity, with consideration for us as the end user. 06:49.210 --> 06:57.910 They're going to be accessed via these deeply personalized and anticipatory interfaces using, like I mentioned before, natural language and voice. 07:00.250 --> 07:16.250 And they are going to culminate into these role-based and purpose-based digital assistants that are ultimately going to help us navigate employees through decision-making processes and the explosion of data in these intelligent ecosystems. 07:17.450 --> 07:30.970 And so as the AI and the cognitive solutions evolve in sophistication, you know, technology, we too as cybersecurity professionals, we've got to figure out how ultimately that's going to affect our jobs. 07:30.970 --> 07:32.950 How is it going to affect our work? 07:33.150 --> 07:39.270 What is, what's our work going to look like in the future when the majority of our workload is automated? 07:39.270 --> 07:47.730 What are the skills that are necessary to operate in these blended worlds where security professionals are working alongside assistants or robotics? 07:49.410 --> 07:53.990 So we're going to have to learn how to operate faster. 07:53.990 --> 07:58.230 We're going to have to be capable of applying new skill sets rapidly. 07:58.410 --> 08:14.430 There's going to be a change in the way that we deal with our skills and we're going to have to learn, you know, a set of skills that place higher value on our people skills, our business intelligence, our independent thinking, innovation, and especially around creativity. 08:15.330 --> 08:18.770 So building the next generation security worker. 08:18.830 --> 08:27.370 So in this next section, we're going to talk about some of the six sets of skills that I kind of wanted to delve into. 08:27.410 --> 08:44.450 I'm sure through many other lectures, we've talked about, you know, traditional cybersecurity skills that you need in order to move on to your next role or even some of the human skills such as presentation and empathy and so forth. 08:44.450 --> 08:57.670 I wanted to take a little bit of a different tack and focus in on skills that I believe security people are going to need if you're operating in a world where much of our work has already been automated away. 08:59.430 --> 09:02.470 So I broke the skills into two different areas. 09:02.470 --> 09:08.070 One are STEM skills and the other one is what we'll call human skills. 09:08.250 --> 09:11.590 So the first one is artificial intelligence. 09:11.590 --> 09:14.190 So this is very meaningful to me. 09:14.190 --> 09:20.010 In fact, I felt so strongly about this when I was working at a design firm as their CTO. 09:20.010 --> 09:26.130 We designed a set of artificial intelligence training for everybody in the company. 09:26.130 --> 09:29.830 As cybersecurity professionals, we're dealing with a couple of things here. 09:29.830 --> 09:36.150 One, you're expected to protect and defend systems that have machine learning built into them. 09:36.150 --> 09:53.470 So from the security architecture and design phase, to the way that we instrument and monitor attacks against systems that have machine learning built into them, to the way that you do digital forensics within these systems. 09:53.470 --> 10:00.830 You have to have a foundational knowledge and understanding of AI in order to be able to do your future job. 10:00.870 --> 10:07.050 But the other is that with the augmented workforce, you're working alongside digital assistants. 10:07.050 --> 10:25.090 We already see this in industries such as supply chain and customer care, where people have digital assistants, or in some cases robotics, that are working alongside and taking over a lot of the day-to-day activities that they, quite frankly, are able to do through automation. 10:25.490 --> 10:40.570 So in building and designing these systems, it's really key and critical for security users to understand AI, not just from a basic level, but I would say ultimately through a mid-level. 10:42.890 --> 10:45.790 The next are biological systems. 10:45.790 --> 10:56.910 So we already mentioned earlier that there's this intersection between the physical, the digital, and the biological worlds, everything that comprises the fourth industrial revolution. 10:56.910 --> 11:07.190 And so we're going to be working in worlds where you're expected to design the cybersecurity controls and embedded biological devices. 11:07.190 --> 11:10.490 So example, think of embedded medical tattoos. 11:10.510 --> 11:17.890 Think of ingestible robots as an example, medications that have like nanobots and so forth that are built into it. 11:17.890 --> 11:24.610 And we're going to be expected to design the security into those and to other bio interfaces and to wearables. 11:24.630 --> 11:34.490 And so understanding that if those systems get compromised, what is going to, what can be the impact to the human is going to be key. 11:34.570 --> 11:36.710 But it's actually a little bit more than that. 11:36.710 --> 11:44.590 You know, the world's been around for what four and a half billion years and biological systems have had the chance to evolve. 11:44.590 --> 11:52.650 And I already mentioned earlier that we oftentimes as security people don't think in ecosystems, we don't think in world building. 11:52.650 --> 12:06.730 And so if we want insight, if you want create, you know, insight into the way that you can approach building security holistically, you can look at biological systems. 12:06.770 --> 12:09.490 A couple of examples, the human immune system. 12:09.490 --> 12:14.070 There are several books out there that talk about human immune system architecture. 12:14.290 --> 12:20.930 And when we look at the way that we design security systems, we oftentimes don't do it very holistically. 12:20.930 --> 12:29.630 And so if you look at the construction of a human immune system and you correlate that, there's a lot of insight that you can get from there. 12:29.890 --> 12:34.750 A couple of quick examples are, it's frictionless and transparent. 12:34.750 --> 12:39.350 When your immune system goes off, it's because there's something bad that's happening. 12:39.350 --> 12:43.050 You don't wake up in the morning thinking about your immune system. 12:43.050 --> 12:51.670 Yet, those are the actions that we expect of end users when we design security systems for them. 12:51.730 --> 13:01.130 So, you know, the future design of cybersecurity systems needs to be, you know, more transparent and a lot less friction, you know, to the end user. 13:01.270 --> 13:06.650 There's insight into biological systems in terms of the way that animals communicate with each other. 13:06.650 --> 13:08.790 And you can take insight from there. 13:08.790 --> 13:20.850 There's, you know, just when you look at everything from ecosystem, terrestrial ecosystem design, you can take inspiration from that in terms of the way that you approach the design of cybersecurity. 13:21.170 --> 13:43.130 So both because we're going to be operating and designing cybersecurity into biological systems, and because there is insight that can be gained from biological systems, I highly recommend becoming more competent in biological systems is a skill that we're going to see cybersecurity people need to do. 13:45.450 --> 13:48.050 User experience design. 13:48.050 --> 13:56.250 So I talked a little bit earlier about what does the design currently, what does the user experience look like for a cybersecurity professional? 13:56.250 --> 13:58.250 We've all experienced it. 13:58.250 --> 14:03.070 It doesn't matter what your role is, you're in it at 100 applications plus. 14:03.070 --> 14:07.310 The context switching that we have to do is astronomical. 14:08.230 --> 14:11.190 It adds a lot of friction to the process. 14:11.190 --> 14:13.410 It adds a lot of time to the process. 14:13.410 --> 14:25.250 And when you're dealing with attacks that, you know, operate rapidly, and again, attacks that can cross multiple worlds, then time is absolutely of the essence. 14:25.250 --> 14:32.910 And yet, and still, when we look at the way that security architectures are designed for us as end users, they're problematic. 14:33.210 --> 14:37.830 Oftentimes, you have to click through multiple screens in order to be able to get anything done. 14:37.830 --> 14:46.350 They are not designed with the care that you design, you know, interfaces for, say, for consumers. 14:46.610 --> 15:03.230 And so, since the future of our applications are going to have these voice interfaces, these digital assistants built into it, we as security professionals understanding how to design user experiences is important to us. 15:03.230 --> 15:06.070 But it's also important to end users. 15:06.070 --> 15:16.070 When we think about what we ask of end users, you know, we don't oftentimes understand, you know, the full experience that they have as part of their journey. 15:16.070 --> 15:30.770 And the things that we're asking them to do as part of their day-to-day activities, or within the applications themselves, don't oftentimes follow the best user experience for that individual. 15:30.770 --> 15:44.150 And so, understanding how to do UX or user experience design, understanding how to map out user journeys and build security into them, I think it's going to be an absolute key experience. 15:47.030 --> 15:49.250 Creativity and design. 15:49.270 --> 15:57.630 So, creativity is still one of those skills that humans outperform machines. 15:57.630 --> 16:07.830 And so, our ability to think outside of the box, our ability to apply creative processes to things are going to be critical, especially in the world of cybersecurity. 16:08.010 --> 16:14.050 We're going to see attacks, and we're going to see breaches, unlike anything we've seen in the past. 16:14.050 --> 16:24.570 Which means that we're going to have to leverage different types of experiences and different ways of doing things, far different than anything that we've done in the past. 16:24.570 --> 16:43.370 And so, a proper education and training in the world of design, and a proper education and training in the world of creativity and things like design thinking, I think are skills that we're going to have to see not only in STEM careers, but definitely in the world of cybersecurity. 16:43.710 --> 16:54.030 We've already mentioned that attackers are really bound only by the limits of their creativity, which means that we need to meet creativity with creativity. 16:57.180 --> 16:58.420 Storytelling. 16:58.740 --> 17:06.700 One of the key things that we're going to have to build as a workforce is our ability to communicate. 17:06.900 --> 17:12.380 Security people are oftentimes very good at communicating with other technical people. 17:12.380 --> 17:29.460 But when we get outside of the technical realm, and we start interfacing with our colleagues, when we interface with users, when we interface with our management, when we interface with the board of directors, we think we are communicating one way. 17:29.460 --> 17:35.020 Unfortunately, our audience is interpreting it a very different way. 17:35.120 --> 17:45.720 And so, understanding how to storytell is going to be one of the key skills in terms of communication and persuasion, quite frankly. 17:45.720 --> 17:50.840 Negotiation skills are predicated also on your ability to storytell. 17:50.840 --> 17:56.300 Humans have been storytelling as a way to communicate information since the beginning of time. 17:56.300 --> 18:03.440 And being able to reach into some of those ancient skills that we have. 18:03.440 --> 18:10.440 And understand how to communicate these very difficult topics using mechanisms such as storytelling. 18:10.440 --> 18:14.640 And understanding things like the hormones behind storytelling. 18:14.640 --> 18:22.600 The way that you tell specific stories in order to elicit certain reactions that actually have hormonal responses. 18:22.600 --> 18:32.580 And get the person to either feel like there's a call to action or have empathy with you as the storyteller. 18:32.580 --> 18:38.120 All of that is predicated on our ability to be able to tell a good story. 18:38.120 --> 18:44.600 So, storytelling is absolutely one of the key skills that we're going to have to build. 18:46.140 --> 18:47.960 And empathy. 18:47.980 --> 18:53.100 So, empathy is I think oftentimes an underrated skill. 18:53.100 --> 18:57.400 And it's because we oftentimes believe that you have it or you don't. 18:57.400 --> 19:01.680 And being able to build a bond with our users. 19:01.680 --> 19:07.180 In fact, key to storytelling is our ability to be empathic. 19:07.180 --> 19:23.120 And so, if we're expecting our users, our colleagues, if we're expecting management to understand what we're trying to communicate, then we also have to be able to look at the world through their eyes. 19:23.120 --> 19:28.040 We need to look at the world through the lens of where they're coming from. 19:28.040 --> 19:33.260 If we're trying to do proper user experience design, that is predicated on empathy. 19:33.260 --> 19:38.200 If you're trying to do creative design, it is predicated on empathy. 19:38.690 --> 19:55.360 So, everything that we do in the world of cybersecurity when we're trying to communicate out and get people to align with us or take specific actions is our understanding of how to look at the world through their lens unbiased. 19:55.520 --> 20:02.300 And work through designing solutions that ultimately allow all of us to be able to work together. 20:06.200 --> 20:07.920 So, I wanted to end on this. 20:07.920 --> 20:10.000 And that's a call to action. 20:10.540 --> 20:30.880 One of the, you know, as security professionals, you know, one of the things that we really need to focus on is demanding oftentimes that the industry as a whole start looking at security experience design end to end and holistically. 20:31.080 --> 20:56.720 So, everything from the way that we interface with applications so that when you're instead of having to interface with 100 different applications, you're working with digital assistants that are capable of automating a lot of the work and then representing the information to us in a way that makes in a way that ultimately makes sense and makes our jobs easier is absolutely key. 20:57.360 --> 21:13.720 Expecting the people who design for us to start thinking about, you know, our lives holistically end to end and not just trying to solve this one problem with this one piece of technology, but understanding the stressors that security people deal with and, 21:13.720 --> 21:20.380 you know, what their lives look like in the context of trying to do this work is absolutely key. 21:20.440 --> 21:25.860 And so, I wanted to have a call to action that we demand more from our vendors. 21:25.860 --> 21:31.200 That when they're designing for us, that they design as if they're designing for a consumer. 21:31.200 --> 21:45.100 So, when we look at things like digital assistants and the way that digital assistants have been built for consumers, why that type of experience can't be built for cyber security needs to stop. 21:45.100 --> 22:05.560 We need to start demanding that proper UX design, that, you know, things like natural user interfaces, that futuristic technology gets embedded into our user experience so that at end of the day, you know, we're able to deliver the protection and defense services to our, 22:05.560 --> 22:10.740 you know, to our companies and to the people that we're responsible for protecting. 22:10.740 --> 22:27.900 And I wanted to thank you for giving me the opportunity to talk about, you know, intelligent ecosystems, some of the human and STEM-based skills that I'd like to predict that we're going to need in order to operate in this future world. 22:27.900 --> 22:31.560 And thank you very much and enjoy the rest of the conference. 22:32.060 --> 22:33.720 Janine, thank you so much. 22:33.720 --> 22:51.880 That was really inspiring and sort of really turning our heads around as far as, you know, we tend to push a lot as far as you need this certification, you need to know this language, you need to know, you know, sort of hard science kind of skills. 22:51.900 --> 23:19.440 And some of the things that we've been talking about over the last year or so has been the skills that people learn when they're volunteering in conferences, learning how to better communicate, learning how to be empathetic and the way you are practicing your empathy is by being a volunteer and dealing with people from different cultures and different backgrounds and understanding that you do have the capacity to be empathetic. 23:19.440 --> 23:24.580 You just need to learn how to use it and constantly practice it. 23:24.580 --> 23:29.020 So these are really great, great pieces of information. 23:29.060 --> 23:34.840 I know a lot of people will be talking to our career coaches over, you know, today and tomorrow. 23:34.840 --> 23:44.880 And I think that this is something that we can really touch on as far as what are the other skills that everyone should be looking at as they develop their career. 23:44.880 --> 23:53.220 So thank you so much for this and everyone have a great evening and we will see you all tomorrow at the Career Hacking Village. 23:53.220 --> 23:54.120 Thank you. 23:54.120 --> 23:54.740 Thank you.