Hack Red Con 2024
-
End the Burnout - 3 things your CISO wishes you knew.
Mark Thacker
-
Doors, Cameras, and Mantraps: Oh, my!
Dylan "The Magician" Baklor
-
Registration Opens
Oct. 25
-
Opening Ceremony
Oct. 25
-
Keynote Round Table - Ed Skoudis, Dave Kennedy, Ken Nevers, Amanda Berlin
Oct. 25
-
Securing Derby 150
Jason PaytonOct. 25
-
Intro to Infrastructure Automation for Offensive Security
Alex MartirosyanOct. 25
-
CISO Roundtable
Oct. 25
-
Creating Intelligence From Malware Samples
Jon "Wally" Prather and Jeff SmealOct. 25
-
Reframing the “Success” of an Offensive Test: Taking a Risk-Based Approach
Celina StewartOct. 25
Josh Mason is the Director of Cyber Training at Arbitr, bringing a rich background in both military and civilian cybersecurity education. A former combat pilot and cyber warfare officer in the United States Air Force, Josh has taught at the US Air Force Special Operations School and the DoD Cyber Crime Center's Cyber Training Academy. He also co-authors the Penetration Testing Student program and the eLearnSecurity Junior Penetration Tester (eJPTv2) exam.
In addition to his military experience, Josh has excelled in sales engineering, consulting, and program development in the cybersecurity industry. He is a technical editor for various industry publications and a dedicated advocate for empowering individuals to pursue careers in cybersecurity. Josh is also the founder of several non-profit organizations.
In the realm of cybersecurity, one of the most critical yet often overlooked skills is the ability to communicate effectively with business stakeholders. My talk, "Making Friends and Influencing People," is designed to bridge this gap and ensure that our vital cybersecurity messages resonate with those who make business decisions.
I've been a pilot and cyberwarfare officer in the Air Force and identified these communication failures first-hand, As a consultant and project manager for a pentesting firm, I have honed an approach for translating cybersecurity information into business-relevant language. In this talk, I will share actionable strategies for cybersecurity professionals to improve their communication by leveraging open-source intelligence about the business, its leadership, and its public-facing documents.
Key highlights of my presentation include:
1. **Business Examples**: Demonstrating how real-world business scenarios can be used to frame cybersecurity needs in a language that business leaders understand and value.
2. **Open-Source Intelligence**: Utilizing information from the company’s investor page, SEC filings, public statements, and social media to tailor cybersecurity messages that align with the company’s strategic priorities.
3. **Crafting Effective Messages**: Techniques to transform technical cybersecurity reports into compelling narratives that highlight their importance to the business’s success and risk management.
By focusing on these areas, my goal is to empower cybersecurity professionals to create impactful, business-centric communications that drive action and support from leadership.
