Richard FitzHughNeedhams 1834

Things I wish I had known.....

• How much money do I need? • Who gives out this money, and for

what? • What do I need to do to persuade

them to give it to me?

How much do you need?

• In minerality....• ‘Organically’• Insurance ...£5m • WHO about 3K a month

65% Oxygen 18% Carbon 10% Hydrogen 3% Nitrogen 1.5% Calcium 1% Phosphorous 0.35% Potassium 0.25% Sulphur 0.15% Sodium 0.15% Chlorine 0.05% Magnesium 0.0004% Iron 0.00004% Iodine Trace quantities of fluorine, silicon, manganese, zinc, copper, aluminum, and arsenic.

Kidney £12KCornea £4K Heart £60KLung £30KLiver £25K Pancreas £70K Blastocysts.......?

How Much Are you Actually worth? (ISC workforce study , 17th Feb)

• ~ 2 million IS workers worldwide (10% ACR). 680,000 EMEA

• Who are they? - 19% IT management, 6% CTOs, 3% CISOs, 10~

%CIOs - 11% sysads 7% network Admin, 7%

programmer• After 5 years experience......EMEA: $66,761

What is an Employer looking for? • The Kobayashi Maru

question : Experience• Qualifications (business as

well as techie) • Ability to Communicate• Publications and conferences

(evidence of comms skills) • Network (e-network) • Social events (white hat) • Associations• Specific Skills...

Getting Experience

• Network ; attend events (cheap point of entry) • Be best mates with a recruitment consultant• Volunteer• Consult “take the job...find out how to do it” –

be agile or big blue? • Associate work• Work at publications & events...........• Worry about the company, not the salary....

Things to look out for....• Main entry criteria is ownership of £50 a year • Articles of association • ‘Executive’ is made up of consultants -

‘Secretariat’ is a family member• Do not endorse others training/ CPD• Annual event is a drinking event, newsletter

is an advert • Who are the existing members?

Dress the guy whose job you want......

Associations

What are they going to Pay me for? • Mobile security & availability • DPA/ Privacy/ Bribery ICO • FSS • Cloud Security • ‘Standards’• PCI• Business Continuity• App testing/security (BI)• SCADA security • “Humans” & Culture • Convergent security • Cyber defence.....

How to Succeed

• Network & Forums - LISTEN!!!!! – where is

the industry and who are you?

• Define your success criteria and stick to it.

• Get the right experience

Example

• Aged 22, Masters in Infosec, specialist in pen testing, keen to develop in gaming industry.

• Aged 24, degree in IT, work experience at major charity, would like to contribute to society.

• At 23, IS masters, lives in Shetland. Interested in (online) application security.

• Work at A bank, oil&gas/mining, arms company, animal testing, fags or medicine company.

• Unless the moral bit is worth £40,000 to you a year by the age of 45.

Questions?