CODY KELLER

Category: Professional Tips


  • It is performance review season. For many security professionals, this is a painful exercise. Why? Because in cybersecurity, success is often invisible. If you write your self-review based solely on “what went wrong” or “what I fixed,” you are underselling your value. You need to shift the narrative from “Operational Activity” to “Business Enablement.” Here…

  • Let’s start with a scenario that every GRC analyst has lived through. The Real-World Disconnect Imagine you are onboarding a new SaaS provider, “Vendor X.” You send them your standard SIG Core questionnaire (all 300 rows of Excel). Three weeks later, they reply. You mark them as “Compliant” and approve the contract. Two months later,…

  • ‘Tis the season for new gadgets. Whether it’s a smart TV, a new connected speaker, a security camera, or a “smart” appliance, these devices (part of the “Internet of Things” or IoT) are popular gifts. But this excitement comes with a risk. IoT devices are notoriously insecure, and a single “hacked” device can give an…

  • The Two Paths: Information Security Manager vs. Principal Contributor As your career in information security progresses, you move from mastering technical skills to demonstrating leadership. You’ve become the go-to analyst, the person who understands the complex GRC requirements, or the engineer who can deconstruct any problem. Now, you’ve reached a fork in the road: Do…

  • The Importance of Cyber Awareness for Professionals

    Let’s be honest, for most professionals, the term “cybersecurity” can conjure up images of a hooded figure hunched over a glowing screen in a dark basement, furiously typing lines of cryptic code. It all feels very Hollywood and, more importantly, very distant from our day-to-day realities of spreadsheets, presentations, and endless video calls. We get…

  • How Training Enhances Cybersecurity Skills

    From Human Error to Human Firewall: How Training Forges Cybersecurity Champions In the ever-evolving landscape of cybersecurity, the human element is often cited as the weakest link. However, with the right training, your employees can be transformed from a potential liability into your organization’s most formidable defense. Comprehensive and ongoing cybersecurity training doesn’t just tick…

  • Conquering the CISSP: Proven Study Tips for Aspiring Cybersecurity Leaders The Certified Information Systems Security Professional (CISSP) certification is a globally recognized standard of excellence in the information security field. Earning it is a significant milestone, opening doors to leadership roles and demonstrating a deep understanding of cybersecurity principles. However, the path to passing the…