List: The Mindset of a Cybersecurity Expert

 




What makes a Cybersecurity Expert different from other experts?

Cybersecurity is different from other fields not just because it is related to information technology but also in the methodology in which things are followed.

 

 

1. The desire to "learn the inner workings" of something https://en.wikipedia.org/wiki/Reverse_engineering

> Cybersecurity is not all about "using tools" and "protecting". In fact a big chunk of it is endless reading and reconnaissance. (What is reconnaissance? https://en.wikipedia.org/wiki/Reconnaissance ) Always be prepared to stop at any time and learn more about your topic or subject.

 

 

2. Craving more knowledge, ie -- More tools and techniques

> Cybersecurity is not a static field of knowledge and always includes more and more discoveries. You should always be prepared to learn more techniques, tools, and skills. This is not a field where you "instantly know it all"

 

 

3. Reading -- The patience to read manuals, instructions, READMEs, etc. https://en.wikipedia.org/wiki/Man_page

> Cybersecurity is endless, endless reading. Be prepared to read, research, learn, and most of all, be patient about your topic. If you are covering defense, be prepared to read nonstop about defense. Same with infrastructure and reversing.

 

 

4. The desire to improve https://en.wikipedia.org/wiki/Lean_Six_Sigma

    a. The workflow > What comes first, second, etc

    b. The tool (software/app/program) > Is there a better tool for this job?

    c. The speed of the process > What can I do to make this job faster?

    d. The efficiency and cost > Can I do this in a way that is cheaper?

More references: https://www.mudamasters.com/en/lean-production-theory/toyota-3m-model-muda-mura-muri

 

 

5. The desire to "get to the goal" https://en.wikipedia.org/wiki/SMART_criteria

> As a cybersecurity expert you should always aim to improve the process but also get to the goal in the best, easiest, cheapest way possible. There's no point in doing a process if there's no goal for it

 

 

6. Solving problems with flowcharts, not checklists

> Checklists are unavoidable but in cybersecurity, it's not like in accounting where everything is done one at a time. Flowcharts allow you to make sure you "get to the goal" in the cleanest and most efficient way.

 

 

7. Improving their arsenal

> There is no "single way" to "get to the goal" so improving your toolbox and tool set is always important. If you have a toolbox on protecting your server for example make sure it is up-to-date and always improved. Don't be afraid to modify your own tools to your liking

 

 

8. Sharing knowledge with others

> There's no point being smart when you don't use it to improve the collective knowledge of the human race. The smarter you become, the more capable you are of teaching others.

 

 

9. Doing it all for the greater good ie CVE Database https://cve.mitre.org/ and Exploit database https://www.exploit-db.com/

> As a cybersecurity expert you should always aim to help improve the greater good and contribute to global compilations of all these knowledge. You can even make a blog or an online course if you want.