Episode #
54
ExtraHop’s Rafal Los on Avoiding Strategic Advisement Mistakes
Show Notes
In our latest episode of the Future of Threat Intelligence podcast, David chats with Rafal Los, Head of Services Strategy & GTM at ExtraHop and the creative force behind the Down the Security Rabbithole podcast. Rafal discusses his journey from curiosity-driven exploration to a professional career in cybersecurity and the lessons he’s learned along the way.
Rafal shares his extensive experience in cybersecurity, offering insights on transitioning from technical roles to strategic leadership positions. He also talks about common misconceptions in strategic advisement, the importance of understanding the business context, and actionable advice for aspiring leaders. Throughout the conversation, Rafal's practical tips and seasoned perspectives make this episode a must-listen for anyone looking to elevate their career in cybersecurity and threat intelligence.
Topics discussed:
Transitioning from technical roles to strategic leadership positions in the cybersecurity industry.
Common misconceptions in strategic advisement and how to avoid these pitfalls.
The importance of understanding the business context to improve strategic decision-making in cybersecurity.
Actionable advice for aspiring leaders in threat intelligence and cybersecurity.
How to bridge the gap between technical language and business objectives effectively.
Practical tips on assessing risks, impacts, and having a clear strategy for cybersecurity initiatives.
Key Takeaways:
Understand the broader business context to make more informed strategic decisions in cybersecurity.
Listen to and comprehend the challenges faced by different stakeholders to improve strategic advisement.
Develop a clear, actionable strategy for cybersecurity initiatives, focusing on both technical and business aspects.
Be skeptical of the information you read to stay critical and informed about industry trends and developments.
Engage in continuous learning by consuming content from diverse sources to broaden your cybersecurity knowledge.
Assess risks and impacts critically to prioritize cybersecurity efforts effectively.
Bridge the gap between technical language and business objectives to enhance communication and decision-making.
Prepare for potential failures by understanding how systems can fail and creating contingencies.
Network with industry professionals to gain different perspectives and insights into cybersecurity challenges.
Seek to understand the experiences and needs of your team and stakeholders to create more effective security strategies.
Quotes from Episode
#1.) “And then I started tinkering and then fast forward a whole long way. And I really kind of got into the whole, gosh, I got into BBS's that's built words as you can dial up into. I got up into some of these things where people didn't have real names, and you just dialed the phone number and you could type back and forth to people across the world. It was amazing. And then I got into school and started really kind of diving into it deeper.” 3:07-3:43
#2.)“The more complex it is, the more complexity you add to a system, the harder it is to secure. And this goes for how do we keep people from clicking on phishing emails to secure software development, to system design, literally everything, including human interaction. The more complex it is, the less likely it is that it will be risk averse. I hate using the word ‘secure’ because nothing is. But the less likely it is to introduce a large amount of risk.” 25:35-26:06