Story time! You’ve been hired at a global company, you’re their new New Zealand security officer (congrats). They ship you to the head office in the US, so you can meet the global security team. You learn the ins and outs, the processes and the long-term goals you’ll be shooting for and jump on a plane back to ol’ NZ. You step of the plane and check the news; your company has just been breached. Imagine how it feels to be working for this company and the thoughts going through your head. Is your career ruined? Imagine seeing all of InfoSec twitter slowly working through all your company’s applications/environments in real time. Imagine what information, answers and guidance your co-workers expect you provide given your recent trip to head office. Imagine what the information and assurances your clients want. Imagine that you have no answers.
This is a talk covering my experiences as the Information Security Officer for Equifax New Zealand where I worked from June 2016 to April 2019.