Thread by @sstranieri

I’m going to tell you some things about #cybersecurity and why you should consider addnig it to your careers. For starters, today there’s a lack of 1.5 million specialists worldwide and the number is expected to grow by 2022.

Today more tan ever, #cybersecurity is important for everyone—professionally, as parents, for our exposition and above all, for our #reputation. Many times I find myself speaking to people that believe that you need to be a #hacker to work in #cybersecurity.

There’re 4 domains you can investigate and study: Information Security Governance, Information Risk Management, Information Security Program Development and Management Information Security Incident Management. All allow to get a #CISM certification,

a well-known and recognized certification with excellent reputation. Anybody with a background in Business Administration, Accountant, Lawyer or Notary could take their career to that path, and I’m sure it’ll be economically worth it.

Regarding the technical part, #CISSP is a super technical certification that became very theorical in my opinion, but it’s recognized worldwide. Isc2.org has knowledge domains: Security & Risk Management, Asset Security,

Security Architecture and Engineering, Communication and Network Security, Identity and Access Management (IAM), Security Assessment and Testing, Security Operations, Software Development Security. You need to know they exist, but can’t be an expert in all of them.

Now, you’re a technician and you want to work in a #BlueTeam #RedTeam #PurpleTeam (such names…) eccouncil.org/programs/certi… This is your path #CEH, or at least one of them.

Talking about how to start working as technician in #cybersecurity, here’s some advice: learn #Linux, the most used operative system for critical systems; learn networking, you need to know how each network component interacts;

Learn about infrastructure: The only way to learn is building your own lab with a single laptop, that’s enough to play. Install a couple of virtuals, containers, whatever you like, and try to navigate that infra. Mount a web server and try to set up a test website

Leave it connected to the Internet for 5 days and learn to recover it once it’s been hacked. I hope these tips encourage you to get into this amazing world. At @vusecurity we have dozens of job posts open, DM if you’re interested