3. What strategies do you employ to keep current in a technological environment which is rapidly changing and developing?

It is not just about technology, but also processes and people. Join a community of practice such as an ISACA chapter or an ISAC for the collective source of intelligence. In this dynamic environment where the threat landscape can fluctuate on a daily basis, having timely intelligence and knowledge allows threats and incidents to be timely addressed before they snowball into a catastrophe of significant business impact.

As shared earlier, it all starts off with the adoption of a risk-based approach such as that encompassed in the COBIT risk management framework, and that entails threat modelling as part of risk identification process. Relying on a threat modelling approach that utilises the MITRE ATT&CK framework is one of the good ways to determine which technologies are complements and which are overlaps against specific techniques. It makes sense to optimise technologies to maximise coverage of the tactics, techniques and procedures.

When it comes to the recruitment of cybersecurity professionals, it is best when there is alignment between the employee’s aspirations with the company’s goals. Keeping the best meant keeping the employee continually challenged enough, where the employee is developed in his mindset, skillsets and so long as everyone speaks the same risk language, and the RACI is clear, then the company would be able to track and keep the best because the employee will feel valued.