What Exactly Do CyberSecurity Professionals Do 🤔?

Kgosi Tshepo — Fri, 15 May 2020 00:57:35 +0000

We've heard about them but we know little of what they do.They are often assumed to be the James Bond' of the internet, fighting the bad guys.

In this blog post we'll go through some of the different roles typical to a cybersecurity organisation.

Chief Information Security Officer(CISO) : A CISO is the head of Information Security Division and they drive the security strategy of the organisation.
Information Security Architect : They have a deeper understanding of different layers of the system, security policies to put in place.Their role is very crucial during the early stages of security life cycle.
Information Security Analyst : Performs information security assessments, analyses events, alerts and any information that could be useful to identify threats.At the end of the assessment a threat mitigation documentation is created.
Information Security Auditor : Their role is to enforce security compliance, reduce risk, and manage potential security threats.
Security Software Engineer : They create security software applications and they have extensive knowledge of programming languages and computer networks.
Penetration Tester/Ethical Hacker : They simulate cyber attacks on already established security systems and identify vulnerabilities before hackers can exploit them.

We'll leave it at that for now 😊!!

CIA Triad in Information Security 🔐

Kgosi Tshepo — Tue, 12 May 2020 19:26:35 +0000

How would you define information security when asked?

I struggled at times to explain this.I would just say it is protection of information and hope that there isn't a follow up question 🥺!

The reality is that the protection of information is governed by Confidentiality,Integrity and Availability popularly know as the CIA triad.

Now let's drill down on each of these concepts👨🏽‍🔧

Confidentiality : Ensures that information is only accessible to authorised entities.This can be enforced by using encryption mechanisms.
Integrity : Ensures that information remain consistent over it's entire life cycle - should not be changed in transit.
Availability : Speaks about ensuring that information remain always available on-demand.

Congratulations you can now flex to your buddies by explaining information security to them 🏌🏽‍♂️

I hope you enjoyed this.Leave a comment and smash that follow button to get notified when I post new content.