ISC2 Security Congress runs October 24 to 28 at the Gaylord Rockies in Aurora, Colorado, and I’ll be on stage twice. Different rooms, different topics. You should leave both with something you can actually use.
Talk one: the career decision you keep re-litigating at 11 PM
Career Center Forum: Should I Stay or Should I Go: Using the MOVE Framework for Career Decisions Monday, October 26, 3:55 to 4:25 PM MT. Careers track. 0.5 CPE.
Every security career hits this wall eventually. The job is fine, or fine-ish, and you cannot tell whether the restlessness is a signal or just a bad quarter. Most people resolve it with vibes and a spreadsheet they abandon halfway.
MOVE is the framework I built for exactly this decision, and it’s already free on this site if you want a head start: the MOVE Matrix career tool. The session is thirty minutes on how to run it against your real situation, when the answer is stay, and how to know the difference between a job problem and a career problem. They are not the same problem, and they have very different fixes.
Talk two: security with resources that don’t match the threat
From NSA to SMB: Threat Modeling When Resources Don’t Match the Threat Tuesday, October 27, 9:25 to 10:25 AM MT. SecOps and Threat Response track. 1 CPE.
The threat modeling literature assumes a team, a budget, and time. Most organizations facing real adversaries have none of those. This session is a working method for figuring out what will actually hurt you and defending it first, built for the security team of one or three, not the security org of three hundred.
Come say hi
If you’re going to be at Congress, come to a session or just find me in the hallway. Hallway conversations are half the reason I go to these things, and I’d rather hear what you’re wrestling with than talk at you from a stage.
Both sessions carry CPE credit, so you can even justify it to your manager.
