CRAIG FORD Cyber Enthusiast, Ethical Hacker, Author of A hacker I am vol1 & vol2, Male Champion of Change, Special Recognition award winner at 2021 Australian Women in Security Awards
C O L U M N
A real hard look Over the last few months I have taken a really hard
However, that does not make them the only way,
look at myself and the industry, at what I have
or even the best way, for everyone to get into the
achieved and at the state of the industry. I have asked
industry. I have a young pentester, Bailey, in my team
myself: have I made a difference? Does what I do
at Baidam. He is a complete natural who just gets it.
matter in the slightest?
He has the raw talent and drive to go out there, find something and just keep pulling at the threads until
Honestly, it is probably just the slightest ripple in a
he achieves his aim. He is a natural hunter with the
massive pond, but every ripple has an effect.
perfect pentester mindset. He does not have a couple of master’s degrees nor an arm full of certifications,
I think, as we become more successful in our lives,
but I feel he has raw talent much greater than mine.
as we mature, we start to self-reflect and think about
One day, with my help or with your help, Bailey, or
the marks we will leave behind when we are no longer
people like him, could have multiple certifications, or
on this earth. My books, these articles, podcasts and
a couple of degrees if they choose to acquire them,
even my contributions to AISA are my way of leaving
but let us look at what we need from the people in
something behind. I try to share my knowledge and
our teams.
help the next generation so when the members of that next generation are ready to take the reins from
We need smart people who have the drive and the
ours they will, hopefully, have the knowledge and
natural gifts we can hone to help them achieve their
have learnt the lessons to guide them to make fewer
potential. In a few years they will reward us for our
mistakes than I, you or all of us together.
efforts (probably a lot sooner, but let’s go with years). I know we sometimes need people with experience,
If we are unable to learn, change paths and adapt
but open your team to these newcomers. Instead of
to what is to come, we have already lost. I see the
getting another analyst maybe get two graduates
truth of that in the ways we bring new people into the
and help them fulfil their dreams. With that small
industry. We are so stuck in our old ways and hung up
investment you get more motivated staff, more hands
on experience and certifications that we lose sight of
on deck and a much stronger industry.
what we are really trying to achieve: bring in raw talent to help find ways to better protect ourselves.
It is not rocket science, but it can make a huge difference.
To me, it is crazy to demand certifications for technologies that are out of date and to require degrees that do not include hands-on experience in their curriculums.
www.amazon.com/Craig-Ford/e/B07XNMMV8R
Now, before I move on, I value certifications and
www.facebook.com/AHackerIam
degrees. I have some certifications and two master’s degrees I have worked very hard to gain. They have taught me a lot, and made me the person I am today.
46
www.linkedin.com/in/craig-ford-cybersecurity
W O M E N I N S E C U R I T Y M A G A Z I N E
twitter.com/CraigFord_Cyber
N O V E M B E R • D E C E M B E R 2022
