Women In Security Magazine Issue 20

20

MAY • JUNE 2024

EMPOWERING TOMORROW'S LEADERS: A FUSION OF EDUCATION AND ENTREPRENEURSHIP P10 OT SECURITY: PROTECTING OUR MOST CRITICAL ASSETS TO SAFEGUARD OUR FUTURE P48 ADVANCING THE CYBERSECURITY SECTOR THROUGH WORKFORCE DIVERSITY P54 W W W. W O M E N I N S E C U R I T Y M A G A Z I N E . C O M

FROM THE PUBLISHER

W

elcome to a milestone

Cyber security is more than just a job; it’s a calling,

edition of Women in Security

a community, a connection. It’s about safeguarding

Magazine as we proudly

not only systems and data but also the trust

present our 20th issue. This

and confidence of individuals and organisations

significant milestone prompts

worldwide. To uphold this trust we must build a

me to pause, reflect and

workforce that reflects the diversity and richness of

recommit to my mission: fostering a vibrant, inclusive

the communities we serve.

future for cyber security.

In this issue we embark on a journey of exploration Our theme for this edition “The Future is Now” could

and discovery. We shine a spotlight on the bright

not be more apt. It serves as both a rallying cry and

and aspiring individuals entering cyber security, each

a sobering reminder of the imperative before us.

bringing their unique perspectives and aspirations.

The future of cyber security hinges on our ability to

Through insightful interviews and thought-provoking

inspire, educate and empower the next generation

features we explore strategies to empower these

of professionals. It’s a challenge that demands our

emerging leaders, nurture their skills through

immediate attention, because the talent pipeline we

innovative self-learning portals and exhilarating CTF

nurture today will shape the industry of tomorrow.

competitions, and foster a culture of generosity and mentorship that transcends generational and societal boundaries.

“Today’s children are tomorrow’s cybersecurity warriors. We must empower them with the knowledge, skills and values to protect our digital world.”

As you delve into the pages of this magazine I

- Barack Obama

Together, let us reaffirm our commitment to building

encourage you to not only absorb the wealth of knowledge and insight it offers but also to reflect on your role in shaping the future of cyber security.

Whether you’re a seasoned professional, a budding enthusiast or an advocate for diversity and inclusion, your contributions matter.

a future where cyber security is not only a profession but a beacon of hope and resilience. Let us seize the present moment to lay the foundation for a tomorrow Consider for a moment the rapid pace of

that is brighter, safer and more inclusive for all.

technological advancement. With each innovation, new opportunities and threats emerge, underscoring the critical need for skilled cyber security experts. Yet, as we navigate this ever-evolving landscape, we must not lose sight of the human element at its core.

2

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

Abigail Swabey

“The next generation holds the key to unlocking the future of cyber security. Their digital native instincts, coupled with a passion for innovation and a drive for social good, will shape the landscape of cyber defence for years to come.”

Thank you for joining us on this journey.

If there’s a feature, topic, theme, career advice or an incredibly inspirational individual you believe should be showcased in the magazine, don’t hesitate to reach out to me. Your input is invaluable in shaping content that resonates with our readers.

Abigail Swabey PUBLISHER, and CEO of Source2Create www.linkedin.com/in/abigail-swabey-95145312

aby@source2create.com.au

I S S U E 20

WOMEN IN SECURITY MAGAZINE

3

CONTENTS

2

INDUSTRY PERSPECTIVES

FROM THE PUBLISHER

EMPOWERING TOMORROW'S LEADERS: A FUSION OF EDUCATION AND ENTREPRENEURSHIP

48

Cyber-savvy kids: Tech professionals can help foster digital health

52

Advancing the cybersecurity sector through workforce diversity

54

Shaping tomorrow for a safer digital world: the future for women in cyber security 58

COLUMN

10

OT security: Protecting our most critical assets to safeguard our future

Cyber warfare in the future?

That future is now

14

Don’t Wait, Your Time is Now

42

Are you ever too young to start your cyber safety journey?

66

Fostering future cyber talent through gamified self-learning portals and CTF competitions

62

Pregnancy and protective security do mix 64

TECHNOLOGY PERSPECTIVES

WHAT’S HER JOURNEY? Elizabeth Omotayo

16

AI for all: Mapping out the journey from diversity errors to inclusion excellence

70

Daniella Kafouris

18

The time to level up is NOW!

72

Jennifer Funk

20

Yaamini Barathi Mohan

22

Anita Modi

24

Ellie Blackman

28

Madhuri Nandi

30

Ankita Singh

32

Oluwatosin (Tosin) Fatokun

34

Nonye Anyanwu

40

THE 112 LEARNING HUB

119 JOB BOARD

MAY • JUNE 2024

44

BUILDING CYBERSECURITY PROWESS: GAMIFICATION, SELF‑LEARNING, AND CTF COMPETITIONS

FOUNDER & EDITOR Abigail Swabey

ADVERTISING Abigail Swabey Charlie-Mae Baker

M A G A Z I N E C O O R D I N ATO R Jane Saafi

JOURNALISTS David Braue Stuart Corner

SUB-EDITOR

108

Stuart Corner

DESIGNER Rachel Lee

TURN IT UP 116

Source2Create Pty Ltd is the publisher of this magazine and its website (www.womeninsecuritymagazine.com).

©Copyright 2024 Source2Create. All rights reserved.

Reproduction in whole or part in any form or medium without express written permission of Source2Create is prohibited.

STUDENT IN SECURITY SPOTLIGHT Sophie Buchanan

76

Isabelle Ho

80

Kayla McLoughlin

90

Anushka Ravalji

93

Eman Elshimy

96

Jessica Sylvia Clement

102

OFF THE SHELF 122

ASSOCIATIONS & GROUPS SUPPORTING THE WOMEN IN SECURITY MAGAZINE

Thank You

TO OUR SUPPORTING ASSOCIATIONS

08

MAY • JUNE

IN 2022, YOU CAN NO LONG ER TAKE SECU RITY WORK ERS FOR GRAN TED P10-13

20 22 W W W. W O

AS THE SECU RITY THREAT MORP DEFE NSIV E HS, TEAM S MUST CHAN GE TOO P76-79 IF YOU CAN’T YOUR WAY TO SPEND SECURITY THISGOOD TRY FOCU SINGYEAR, ON YOUR PEOP LE P94-97

YEAR OF THE SECURITY WORKER

MENINSE

WHO RUNS

CURITYM

AGAZINE.

COM

WORLD the

W W W. W O

MENINSE

CURITYM

AGAZINE.

COM

TO O U R M A

GAZINE

SUBSCRIBE

07

MARCH • APRIL

Never miss an edition again!

Subscribe to the magazine today for exclusive updates on upcoming events and future issues, along with bonus content.

SUBSCRIBE NOW

AUSTRALIA’S

BEST SELLING S AN AUD I

OK BO

SO AL

A LE

O

AVAIL AB

CYBER SECURITY BOOK

Bought it for my daughter and we are both very impressed! Great artwork as well as the book itself. She is a 9 year old avid internet user, and I do worry about what she gets up to and the choices she makes. We limit her access and have cyber security overlays on her devices - but we are not too clued up on cyber security so it was always a worry.

This book has been great to get conversation flowing that I didnt really know how to start up, and it has definitely taught her some worthwhile lessons on things to look out for and "shadowy corners" of the internet to be cautious of! I recommend this book.

BUY THE EBOOK

BUY THE AUDIOBOOK

BUY THE PAPERBACK

NARELLE DEVINE

EMPOWERING TOMORROW'S LEADERS: A FUSION OF EDUCATION AND ENTREPRENEURSHIP

by Narelle Devine, Telstra CISO for Asia Pacific

No team in any discipline is a static entity: people join, people leave; they aspire to advance their careers, some into specialised niches, others into managerial or leadership roles.

A

key responsibility of every senior

And it means striving to ensure the organisation

manager is to oversee and guide these

gets the best possible leaders, in each of many

aspirations in the best interests of

diverse leadership positions. Today’s cybersecurity

the individuals and the organisation

industry with its rapidly evolving threat landscape,

they serve. This requires managers

driven by rapid and far reaching technology

to be attuned to the aspirations and abilities of

developments, arguably requires a particular blend of

individuals, to see potential in some they do not see in

leadership skills.

themselves and help them realise that potential.

10

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

F E A T U R E

Telstra CISO for Asia Pacific, Narelle Devine, is

awareness, creative problem solving, passion,

responsible for one of Australia’s largest teams

decisiveness and long term thinking. She says many

of cyber security professionals. She faces these

of today’s leaders exhibit these traits. “I’ve rarely

challenges across teams that are particularly diverse

met a cyber professional who isn’t passionate and

in geography, ethnicity and responsibilities. She says

persistent. Entrepreneurial flair absolutely has a

taking the leap into a leadership role can be a career

place in cyber regardless of where you’re practicing

defining moment for an individual. “We always want

your craft.

to set our leaders up for success.”

“In such a dynamic industry as cyber security, where An attribute she identifies as being highly desirable

the landscape is always changing, our leaders of

in a cybersecurity leader might not be top of mind for

tomorrow will need all these traits. There’s absolutely

many people: entrepreneurship. “Entrepreneurship is

a place for entrepreneurial flair regardless of whether

incredibly applicable to all sorts of different fields of

you’re trying to build a cyber security business or

study and disciplines, and real magic comes when it’s

you’re working to help protect a large organisation. If

applied to fields such as STEM,” she says.

you’re facing a complex challenge, bringing someone in who sees solutions and opportunity can help speed

THE POWER OF ENTREPRENEURSHIP

up the navigation through that challenge.”

“I’ve seen a subtle demonstration where a staff member has applied all the skills an entrepreneur

EVERY ENTREPRENEUR NEEDS A TEAM

would possess to grab a challenge and solve it in an

No matter how entrepreneurial a good leader may

incredibly clever, savvy way. They had an ability to

be, they are nothing without a team to lead and

look through the challenge and see an opportunity.

Devine says the two need to complement each

They could balance risk with opportunity. They were

other. “Crafting a well-balanced, high performing

curious, resilient and innovative. Combined with

team around a leader can be the difference between

their drive, passion and dedication, they delivered a

delivering on the vision and not. Look for people who

great outcome.”

complement you and have strengths that compensate for your weaknesses. Make sure not to skew your

She lists traits associated with entrepreneurship as

team with people who are too technical or too

being curiosity, persistence, adaptability, resilience,

passionate about using cyber to protect the business.

innovation, an ability to take calculated risks, self-

I S S U E 20

WOMEN IN SECURITY MAGAZINE

11

CAN ENTREPRENEURSHIP BE TAUGHT?

Entrepreneurship is incredibly applicable to all sorts of different fields of study and disciplines, and real magic comes when it’s applied to fields such as STEM. I’ve rarely met a cyber professional who isn’t passionate and persistent.

Entrepreneurial flair absolutely has a place in cyber regardless of where you’re practicing your craft.

– Narelle Devine

Like professionals in every industry, cyber security professionals train to advance their careers: they take specialist cyber security courses, management, communication and leadership courses. And they can also take courses in entrepreneurship; there is no shortage of them. However, it is moot whether entrepreneurship can be taught, and there are many articles discussing this question. This one, on Wired, argues entrepreneurship can be taught, but it comes with a caveat: “A degree program in entrepreneurship can teach important skills — and perhaps help graduates achieve their goals more quickly through internships and networking opportunities. But the essential passion, drive and creativity of an entrepreneur cannot be measured or taught.”

Devine agrees: “I believe we can teach most people most things. You can have all sorts of skills, but if you don’t want to apply them, they’re mute.

“Technical skills and passion are important but a

Passion and drive is such an important element of

balanced team with all-round people, process and

entrepreneurship and cannot be understated!”

technology skills is really important; a team that knows how to challenge the business, and each

On the teaching of ‘most things’ Devine says Australia

other, and with that special attitude that tries to work

does well. “We are fortunate to have access to high

hard with other teams to find a way to successfully

quality education here in Australia.” However, she

balance cyber risks with business priorities, and

stresses the importance of the informal education

achieve the right outcomes.”

that “comes through experience and learning from each other,” saying: “A conscious, well-designed

As for the other attributes of successful leaders,

mentoring and peer engagement program to

Devine says she was “reflecting on what we look for

complement the formal learning is incredibly

in a leader with my trusted Deputy CISO” and they

powerful. The rate of change, complexity and breadth

kept coming back to someone with an open, enquiring

of regulatory, policy, business and technology issues

mind and willingness to learn. “We’re looking for our

requires continuous learning and growth.

leaders to understand how we can keep improving cyber while also enabling the business to be

“We have a great ecosystem of very talented cyber

successful. Those two must go hand in hand.

leaders in Australia, and globally, who are all usually very happy to share their knowledge and experience.

“Protecting the business while also enabling the

Having a strong professional network, supported by

business are not mutually exclusive and are key to

effective mentoring, is really important to cultivate

a successful cyber leader. And an open, enquiring

effective, flexible, and well-rounded leaders.”

mind is critical to always finding new and better ways to keep up with emerging challenges and working together with the business to support new business

www.linkedin.com/in/narelle-devine-csm-79548826

initiatives, whilst also reducing legacy risk.”

12

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

INTERESTED IN WORKING TOGETHER? Contact Aby Aby@source2create.com.au www.source2create.com.au

MEDIA

CONTENT

EVENTS

ADVERTISING

CUSTOM AS-A-SERVICE

AMANDA-JANE TURNER Cybercrime is big business, thanks to technical advancement and interconnectivity creating more opportunities. This regular column will explore various aspects of cybercrime in an easy-to-understand manner to help everyone become more cyber safe.

C O L U M N

Cyber warfare in the future?

That future is now

There is no globally agreed definition of what

cyber attacks against the other. How can this not be

constitutes an act of cyber warfare. However, in the

cyber warfare?

twenty-first century whenever there is kinetic conflict there is sure to be disruptive cyber activity. In some

With critical infrastructure so reliant on technology

cases the cyber disruption happens just prior to

and the internet, enemy nations can easily disrupt

physical attack. Think about how Viasat’s KA-SAT

essential services of a country or its allies from the

network suffered from a cyber attack that disrupted

safety of their own territory. In a world heavily reliant

Ukrainian communications just before Russia

on the internet, warring nations can easily disrupt

physically invaded the country. How could this not be

the logistics, health services, water and sewage

an act of cyber warfare?

plants and power stations of their enemies, crippling a country’s core services and impacting the health,

Russian cyber threat actors boast on their Telegram

safety and security of civilians.

channels about how they have contributed to the war effort by mounting disruptive attacks against

War is no longer confined to the battlefield. The future

Ukraine and its allies. Meanwhile, the Ukrainian

of war is in cyberspace. The future of cyber warfare

Government proudly boasts on its public military

is now.

intelligence website about the cyber attacks it has mounted against Russia. It has shared images of the documents it claims to have exfiltrated from Russian government computers. Russia and Ukraine are two countries in kinetic conflict, and each is mounting

14

W O M E N I N S E C U R I T Y M A G A Z I N E

www.linkedin.com/in/amandajane1

www.demystifycyber.com.au

M AY • J U N E 2024

WHAT’S HER JOURNEY?

Elizabeth Omotayo Web Specialist (networks and security)

E

lizabeth Omotayo’s journey into the realm

Moreover, Elizabeth’s journey was marked by a

of cybersecurity is a testament to her

steadfast commitment to honing her practical

unwavering commitment to addressing

skills. Recognising the importance of hands-on

societal insecurities, particularly those

experience in cybersecurity, she took the initiative

deeply ingrained during her upbringing

to set up a home cyber laboratory, where she could

in Africa. Witnessing firsthand the prevalence of

experiment with various tools and techniques in a

cybercrimes and money laundering in her community,

controlled environment. Additionally, she created

Elizabeth felt a calling to confront these issues head-

a threat intelligence Honeypot, a sophisticated

on. As she embarked on her educational journey in

system designed to lure cyber attackers and gather

Canada, her interest in cybersecurity burgeoned,

valuable insights into their tactics and strategies.

fueled by a recognition of the persistent threat posed

Through these endeavors, Elizabeth demonstrated her

by cybercriminals and the urgent need for skilled

proactive approach to learning and her dedication to

professionals to combat them.

mastering the intricacies of cybersecurity.

In the early stages of her career, Elizabeth took

Unlike many individuals navigating their career

deliberate and pivotal steps to transform her passion

paths, Elizabeth never hesitated in her conviction to

for cybersecurity into a professional pursuit. Armed

pursue a career in cybersecurity. With a clear vision

with a thirst for knowledge and a determination

of her desired role in cyber operations, particularly

to make a difference, she delved into research on

in offensive security, she remained steadfast in her

cybersecurity crimes, focusing her efforts on the

pursuit of excellence. Driven by a sense of purpose

alarming phenomenon of cyberbullying and its dire

and a desire to make a meaningful impact, Elizabeth

consequences, particularly for vulnerable groups

embraced each challenge as an opportunity for

like teenage girls. Through her research, Elizabeth

growth and learning, refusing to be deterred by

aimed not only to understand the mechanisms

setbacks or obstacles along the way.

behind cyberbullying but also to identify strategies for combating this pervasive issue.

Reflecting on her journey, Elizabeth offers valuable insights and advice to young and to aspiring

16

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

W H A T ’ S

H E R

J O U R N E Y ?

cybersecurity professionals. She emphasizes the

She has ambitious goals and aspirations and plans

importance of staying focused on one’s aspirations

to pursue certifications such as CISSP and ultimately

and listening to one’s inner voice, even in the face

aims to become a Chief Information Security Officer

of uncertainty or doubt. Furthermore, Elizabeth

(CISO), leveraging her expertise and experience to

underscores the significance of building a strong

lead organisations in safeguarding their digital assets

foundation in networking and programming, citing

and infrastructure. The aspect of her current role

Python and JavaScript as essential skills for success

that brings her the most satisfaction is the analysis

in the field of cybersecurity.

of reports and the utilisation of software tools to mitigate cybersecurity risks, allowing her to make

Looking to the future, Elizabeth remains keenly

a tangible impact in protecting critical systems

aware of emerging trends and threats in the

and data.

cybersecurity landscape. She recognises the growing importance of Artificial Intelligence and the

Elizabeth Omotayo’s journey in cybersecurity portrays

metaverse as significant challenges that will shape

her passion, perseverance, and dedication to making

the future of cybersecurity over the next two years.

the world a safer place. Through her relentless pursuit

To stay current and effective in her role, Elizabeth

of excellence and her unwavering commitment to

employs a multifaceted approach, staying abreast of

continuous learning and growth, Elizabeth embodies

cybersecurity news, conducting in-depth research,

the qualities of a true cybersecurity professional,

and actively participating in forums and community

poised to confront the challenges of tomorrow with

activities to raise awareness about cybersecurity

confidence and resilience.

threats, particularly among vulnerable populations like senior citizens. www.linkedin.com/in/omotayo-e-0a66835a

www.instagram.com/the_waleola

I S S U E 20

WOMEN IN SECURITY MAGAZINE

17

Daniella Kafouris Partner at Deloitte specialising in Transformation, Data, and Cyber

D

aniella Kafouris, a Partner at Deloitte

Despite initial uncertainties stemming from her

specialising in Transformation, Data,

non-technical background, Daniella discovered the

and Cyber, embarked on her journey into

expansive nature of cybersecurity, welcoming diverse

cybersecurity with an unconventional

skill sets into the industry fold. Drawing from her

twist. Initially drawn to the realm of

legal and regulatory expertise, she offers a unique

the United Nations, Daniella pursued studies in

perspective that bridges the gap between legal

arts and law. However, her trajectory shifted upon

frameworks and cybersecurity protocols, enhancing

encountering a Cyber Law diploma, sparking a

compliance and risk management strategies for

newfound passion for cybersecurity.

clients across various sectors.

Opting out of traditional legal pursuits, Daniella

Her career path unfolded organically, driven by

ventured into consulting, establishing her own firm,

client demands and market forces, emphasising

CyberAdvice. Through self-teaching and practical

the importance of adaptability in a rapidly evolving

problem-solving, she honed her skills, ultimately

landscape. From advising startups on cybersecurity

catching the eye of industry leader Deloitte, where she

best practices to collaborating with multinational

continued to expand her expertise.

corporations on large-scale digital transformations, Daniella’s journey reflects the dynamic nature of the

Navigating the complexities of cybersecurity, Daniella

cybersecurity field and the limitless opportunities it

confronts challenges with unwavering resilience,

offers for professional growth and development.

balancing innovation in a turbulent economy with the

18

perpetual threat of data breaches. In her current role

Reflecting on her journey, Daniella imparts valuable

at Deloitte, she spearheads transformative initiatives

advice to her younger self, encouraging a broader

that integrate data-driven insights with robust

perspective on industry opportunities. She highlights

cybersecurity protocols, ensuring organisations

the importance of embracing change, seizing

stay ahead of emerging threats while maximising

unexpected opportunities, and staying curious in the

operational efficiency.

face of uncertainty.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

W H A T ’ S

H E R

J O U R N E Y ?

Looking ahead, Daniella anticipates impactful

In a demanding field, Daniella prioritises work-

developments in cybersecurity, mentioning the

life balance, cherishing family time amidst her

need for vigilance amidst geopolitical tensions and

busy schedule. As a dedicated wife and mother of

technological advancements. With the rise of artificial

two, she finds solace in shared meals and quality

intelligence, quantum computing, and interconnected

time with loved ones, recognising the importance

digital ecosystems, she envisions a future where

of maintaining personal well-being amidst

cybersecurity becomes even more integral to

professional responsibilities.

safeguarding organisational assets and protecting individual rights in an increasingly digitised world.

To remain at the forefront of her field, Daniella embraces continuous learning, surrounding herself

Beyond monetary considerations, Daniella values

with brilliant minds and fostering a culture of

professional growth opportunities and influential

intellectual discourse. By encouraging her team to

mentors who shape her trajectory. She recognises

challenge assumptions, think critically, and innovate

the importance of continuous learning and

fearlessly, she cultivates an environment where new

collaboration in staying abreast of industry trends

ideas flourish, driving impactful change and driving

and emerging threats, leveraging her network to

her career forward with passion and purpose.

exchange insights and best practices with fellow cybersecurity professionals. www.linkedin.com/in/daniellakafouris

I S S U E 20

WOMEN IN SECURITY MAGAZINE

19

Jennifer Funk Manager II Cyber Defence & Ops US at Ahold Delhaize

E

mbarking on a career in cybersecurity is

the cybersecurity field at all,” she admits candidly.

akin to traversing uncharted territory, where

However, Jennifer’s resilience and unwavering resolve

resilience, adaptability, and a strategic

propelled her past these hurdles. She emphasises the

mindset are essential for success. Jennifer

importance of self-care and resilience, advocating

Funk, Manager II Cyber Defence & Ops US

for individuals to prioritise their well-being amidst

at Ahold Delhaize, shares her profound insights and

professional challenges.

experiences, shedding light on the multifaceted nature of the cybersecurity domain.

Addressing the nuances of cybersecurity education, Jennifer offers sage advice tailored to the individual’s

Reflecting on the pivotal steps that catalysed her

aspirations and interests. She acknowledges the

transition into cybersecurity, Jennifer underscores the

diversity of degree programs and certification options,

significance of patience and realistic expectations.

urging prospective students to align their educational

She recalls the allure of the field, coupled with the

pursuits with their career objectives. “Not all

recognition that true mastery requires time and

cybersecurity or computer science degrees are equal,”

dedication. “I see a lot of people diving into the field

she cautions, emphasising the need for meticulous

expecting a quick change or quick learning pay off

research and discernment.

when the reality is the cybersecurity field is VAST,” she reflects. Her journey represents the importance

Jennifer’s journey underscores the transformative

of perseverance amidst the complexities of

power of self-belief and perseverance, qualities she

cybersecurity education and career development.

wishes to impart to her high school self. Encouraging exploration and resilience, she underscores the

Throughout her professional trajectory, Jennifer

importance of embracing challenges and refraining

encountered moments of uncertainty and self-

from underestimating one’s capabilities. “We are,

doubt, common sentiments shared by many

especially as young adults, so quick to think we

venturing into unfamiliar terrain. “There were times

can’t do something just because it seems daunting,”

I would feel the knowledge was not coming fast

she reflects.

enough, or I was just not capable of getting into

20

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

W H A T ’ S

H E R

J O U R N E Y ?

Looking ahead, Jennifer identifies Artificial

cybersecurity. Acknowledging the inherent challenges

Intelligence (AI) as a pivotal trend shaping the

of balancing various responsibilities, she advocates

cybersecurity landscape. While AI promises

for self-compassion and flexibility. “Realising 100%

advancements in threat detection, it also poses

is not always going to happen, and that is ok,” she

challenges, empowering malicious actors with

reassures, emphasising the value of self-care amidst

sophisticated tools. “In some respects, it will speed

professional demands.

up reaction time, make identifying threats easier, and other boons for defenders,” she observes. Jennifer

Drawing from her own transition into cybersecurity,

stresses the importance of proactive measures to

Jennifer highlights the value of transferable skills

mitigate emerging threats effectively.

and networking. Leveraging existing strengths and seeking mentorship from seasoned professionals, she

In terms of professional growth, Jennifer outlines

underscores the importance of fostering a supportive

her strategic approach to certification and skill

community conducive to personal growth.

development. With plans to pursue certifications such as SANS FOR 508 for technical advancement and

Jennifer’s journey serves as a testament to the

CISSP for leadership development, she underscores

resilience, adaptability, and continuous learning

the importance of continuous learning and adaptation

inherent in the cybersecurity profession. Her insights

in an ever-evolving field.

offer invaluable guidance for aspiring professionals navigating the dynamic landscape of cybersecurity.

Maintaining a harmonious work-life balance remains a cornerstone of Jennifer’s approach to

I S S U E 20

www.linkedin.com/in/jenniferfunk1

WOMEN IN SECURITY MAGAZINE

21

Yaamini Barathi Mohan Product Security at Dell

Y

aamini Barathi Mohan’s journey into the

Master’s degree in cybersecurity would provide her

realm of cybersecurity was sparked by

with the comprehensive knowledge and exposure

a single course in Cryptography during

she sought.

her pre final year. As a student with a penchant for mathematics and problem-

In her own words, Yaamini expressed, “After thorough

solving, the intricacies of information security

research, I concluded that obtaining a Master’s

immediately captivated her. Eager to deepen her

degree in cybersecurity would provide me with

understanding, Yaamini immersed herself in various

comprehensive knowledge and exposure to various

courses and internships, exploring topics ranging

aspects of the field. As a cybersecurity master’s

from cloud security to networking.

program typically provides a well-curated combination of courses such as ethical hacking, IoT security,

Reflecting on this transformative period, Yaamini

cryptography, and more.”

shared, “It became evident to me that analytical thinking was crucial for excelling in the field of

Her decision led her to Johns Hopkins University in

Information security. This experience ignited my

Maryland, USA, where she embarked on a fulfilling

passion for cybersecurity, and since then, I’ve been

educational journey. The program offered a curated

continuously exploring and expanding my knowledge

blend of courses in ethical hacking, IoT security,

in this dynamic field.”

cryptography, and more, laying a solid foundation for her career in cybersecurity. Since then, Yaamini’s

The pivotal steps that transformed Yaamini’s interest

journey has been one of continuous learning

in cybersecurity into a professional pursuit began

and improvement, with each day presenting new

with a realisation: her skill set needed refinement

opportunities to enhance her skills and deepen

to excel in the field. Recognising the importance of

her expertise.

relevant certifications and courses, she embarked on

22

a thorough research journey to identify the best path

Reflecting on her early career, Yaamini acknowledges

forward. Ultimately, she concluded that pursuing a

that her path in cybersecurity wasn’t entirely organic.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

W H A T ’ S

H E R

J O U R N E Y ?

While her goal was to gain comprehensive knowledge

Influenced by her father’s guidance and inspired

of the security field, she actively pursued different

by the achievements of women cybersecurity

opportunities and roles to achieve it. From ethical

professionals, Yaamini is grateful for the supportive

hacking to vulnerability response, Yaamini’s journey

network that has guided her professional journey. She

was marked by deliberate efforts and perseverance,

actively participates in cybersecurity communities

ultimately leading her to roles that fulfilled

and organisations, advocating for gender equality and

her aspirations.

fostering diversity within the field.

In contemplating job offers representing career

Drawing from her experience, Yaamini offers advice

advancement in her cybersecurity specialisation,

for individuals transitioning into cybersecurity from

Yaamini considers factors beyond remuneration.

other professional backgrounds. She highlights

She prioritises roles that offer scope for growth and

the importance of building a strong foundation,

learning. Additionally, she values companies that

identifying transferable skills, specialising in a specific

place first and foremost the security of their assets

area, networking with professionals, staying updated

and actively support diverse communities.foremost

with industry trends, embracing continuous learning,

the security of their assets and actively support

gaining practical experience, and remaining adaptable

diverse communities.

and resilient to challenges.

www.linkedin.com/in/yaamini-barathi-mohan-45632b188

I S S U E 20

WOMEN IN SECURITY MAGAZINE

23

Anita Modi Cyber Risk Advisor at Advaya Cybersecurity Consulting

A

nita Modi’s journey into the world of

The hands-on experience she gained from various

cybersecurity began with a stroke of luck

positions at other organisations provided invaluable

after completing a bachelor’s degree in

insights into the dynamic nature of cybersecurity,

computer science. Her academic path

solidifying her passion for proactive cyber risk

took an unexpected turn when she was

management.

accepted into an Honours degree program, where she found herself drawn to modules on cryptography

In her current role as a cyber risk advisor, Anita

and information security governance and risk. These

faces complex challenges on a daily basis. She

modules ignited her initial interest in information

highlights that one of the most significant challenges

security, prompting her to structure her academic

organisations face is ineffective communication of

pursuits around information security-related subjects.

cyber risks to organisational stakeholders. Bridging the gap between technical jargon and business

As Anita delved deeper into her studies, her

outcomes requires not only a deep understanding

fascination with cybersecurity grew. She realised the

of cybersecurity principles but also strong

critical importance of protecting digital assets and

communication and analytical skills. Anita has made

sensitive information in an increasingly connected

it her mission to translate technical complexities into

world. This realisation led her to pursue a master’s

language that resonates with executives, enabling

degree in advanced cybersecurity, where she

them to make informed decisions that align with the

delved into advanced topics and gained a deeper

organisation’s overall goals.

understanding of the complex challenges facing cybersecurity professionals.

When identifying risk and determining its impact to an organisation, Anita points out that there are

24

Transitioning from academia to the professional

a number of limitations with loosely defined as risk

realm, Anita’s journey took her to E&Y, one of the Big 5

categories such as “high” or “critical” where the

firms, where she began her career as an information

thresholds aren’t well defined, the ceiling of “high” isn’t

security analyst. Here, she was exposed to real-

easily distinguishable from the floor of “critical”. This

world cybersecurity challenges, including identifying

makes it difficult to determine if certain cyber risks

system vulnerabilities and mitigating cyber threats.

have materially increased or decreased. Typically

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

W H A T ’ S

H E R

J O U R N E Y ?

risk tolerance/appetite levels are missing from a risk

Looking ahead, Anita’s vision for the future of

matrix. A risk matrix without the corresponding risk

cybersecurity is one of inclusivity and diversity.

appetite is not complete. Financial impact is at the

She believes that by empowering more women

heart of making informed business decisions and

and underrepresented groups to pursue careers in

without financial measure, organizations may find it

cybersecurity, the industry can benefit from a wider

difficult to determine the level of resource allocation

range of perspectives and ideas. As she continues

and the level of prioritization of certain risks. What’s

to make strides in her own career, Anita remains

interesting is that measuring cyber risk is a lot like

committed to paving the way for the next generation

measuring other risks. Migrating to a quantitative

of cybersecurity professionals and advocating for a

cyber risk model of analysis and reporting allows

more inclusive and equitable industry.

for more accurate data, which leads to more informed decision-making.

Anita Modi’s journey in cybersecurity is a testament to the power of passion, perseverance, and continuous

Despite her drive and passion for bringing this

learning. From her humble beginnings in academia

awareness to her clients, Anita’s journey in

to her current role as a cyber risk advisor, she has

cybersecurity has not been without its challenges.

overcome numerous challenges and obstacles to

As a woman in a predominantly male-dominated field,

carve out a successful career in a field she is deeply

she has encountered moments of uncertainty and

passionate about. As she continues to make her mark

self-doubt. Balancing the demands of a demanding

in the cybersecurity world, Anita remains steadfast in

career with the responsibilities of motherhood has

her commitment to making a meaningful impact and

also presented its own set of challenges. However,

driving positive change in the industry.

Anita has navigated through these obstacles with resilience and determination, relying on her passion for cybersecurity and the support of mentors and

www.linkedin.com/in/anita-modi-cyber-risk

peers to guide her forward.

I S S U E 20

WOMEN IN SECURITY MAGAZINE

25

INTRODUCING OUR

024 2Australian

WOMEN IN SECURITY AWARDS JUDGING PANEL

JOHN TAYLOR Group Executive | CIO | CTO | CISO

MAXINE HARRISON CISO from Department of Energy, Environment and Climate Action

DANIEL GRZELAK Chief Innovation Officer at Plerion

LEANNE FRY

CLIVE REEVES Deputy CISO AsiaPac at Telstra

STEPHEN BENNETT Group Chief Information Security Officer at Domino’s Pizza Enterprises Limited

SALESHNI SHARMA

YASO ARUMUGAM

Director, Regional Information Security Officer: AsiaPac at W. R. Berkley Corporation

Assistant Director-General Data and Digital, CIO, CISO at National Archives of Australia

NADIA TAGGART

SARAH LUSCOMBE

CISO at Western Sydney University

Head of Cyber Security at the University of Canberra

ANAFRID BENNET Head - Technology, Security & Property at Greater Western Water

MARYAM BECHTEL Chief Information Security Officer at AGL

LAURA WHELAN Director, Security & Business Continuity at National Indigenous Australians Agency

JACKIE MONTADO Chief Digital and Technology Officer at Wesfarmers Industrial and Safety

PAUL CLARKE Head of Security at Canva

VISIT THE WEBSITE womeninsecurityawards.com.au

®

NIKKI PEEVER Director, Cybersecurity at CAUDIT

ROXANNE PASHAEI Chief Information Security Officer at NSW Rural Fire Service

CRAIG FORD Australian Best-Selling Author | vCISO | AISA Member Board of Directors | Security Journalist

JASON MURRELL Independent Chair CSCAU | Cyber Security Standards Development

DAN MASLIN Group Chief Information Security Officer at Monash University

LYNWEN CONNICK Cyber Security and Technology executive l Chief Information Security Officer | CIO | Advisory Board Member | Mentor | Diversity Advocate

TAMSIN JOWETT ICF Executive Coach & Diversity Consultant at Coaching To Thrive

JANICE LAW Chief Information Security Officer at Services Australia

Nominations ARE OPEN 1ST FEB 2024 TO THE 30TH JUNE 2024

Why Nominate?

To identify rockstars To celebrate ‘hidden’ security superstars To lift and empower the entire company To express admiration for fellow co-workers To pause and express your gratitude To pay it forward - and give back to the community

HOW TO SUBMIT A WINNING NOMINATION TIP #1

TIP #2

TIP #3

Authenticity

Highlight Achievements

Support with Testimonials

First and foremost, be authentic.

When crafting your nomination, share real stories and concrete examples that highlight the nominee's impact in the cybersecurity & protective security field. The more genuine and specific, the better.

Whether it’s groundbreaking projects, leadership roles, or innovative solutions, make sure to showcase the nominee’s outstanding contributions to the industry. Numbers and metrics can add that extra punch!

TIP #4

TIP #5

Emphasise Diversity & Inclusion

Collaboration is Key

Share how the nominee has contributed to creating an inclusive environment in the cybersecurity & protective security sector. Highlight initiatives that promote diversity and equal opportunities.

Collaboration is key.

If you’re part of a team, gather input and insights from your colleagues. They might have unique perspectives on the nominee’s contributions and can help strengthen your nomination.

Gather testimonials. Reach out to colleagues, mentors, or anyone who can provide additional insight into the nominee’s skills and impact. A well-rounded nomination with testimonials adds credibility and depth.

2024

NOMINATE

TODAY

Ellie Blackman Security Analyst at Culture Amp

E

llie Blackman’s journey into the world of

Amp, a decision that would ultimately alter the course

cybersecurity is a captivating narrative

of her career. Despite initial hesitations and doubts

that underscores the transformative

about her qualifications, Ellie’s innate curiosity and

power of passion, perseverance, and

determination drove her to seize the opportunity and

personal growth. Her career trajectory

embark on a new chapter in her professional journey.

didn’t follow a conventional path but rather unfolded through a series of pivotal moments and deliberate

In her current role at Culture Amp, Ellie’s days are

choices, each contributing to her evolution as a

characterised by a diverse array of responsibilities

cybersecurity professional.

and priorities, each demanding a unique blend of technical expertise, strategic thinking, and

It all began during Ellie’s tenure in Technical Support

collaborative teamwork. From conducting

at a small company, where she found herself on

thorough SaaS assessments to responding to

the front lines of customer interactions, addressing

security questionnaires and spearheading process

inquiries and concerns related to privacy and data

improvement initiatives, Ellie’s contributions

security. Through these interactions, Ellie developed

are instrumental in fortifying the organisation’s

a profound understanding of the importance of

cybersecurity posture and fostering trust among

safeguarding personal data and educating individuals

its stakeholders.

on cybersecurity best practices. This experience served as the initial spark that ignited her interest in

Navigating the complexities of her role hasn’t been

cybersecurity, revealing to her the crucial role that

without its challenges. As a relatively newcomer to the

technology plays in protecting sensitive information.

field, Ellie has grappled with moments of uncertainty and self-doubt, questioning her decision-making and

28

As Ellie transitioned through different technical roles,

expertise. However, with the unwavering support

she found herself yearning for more substantial

of her colleagues and a steadfast commitment to

challenges that would push her boundaries and ignite

continuous learning and growth, Ellie has embraced

her passion for learning. It was during this period of

these challenges as opportunities for personal and

introspection that a colleague’s encouragement led

professional development, emerging stronger and

her to consider a vacant cybersecurity role at Culture

more resilient with each hurdle overcome.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

W H A T ’ S

H E R

J O U R N E Y ?

Looking towards the future, Ellie is driven by a

and learning. By leveraging one’s unique strengths,

relentless pursuit of excellence and a desire to expand

cultivating a growth mindset, and seeking out

her knowledge and expertise in cybersecurity. With

mentorship and support from peers and colleagues,

plans to pursue certifications such as the Certificate

Ellie believes that anyone can succeed in the dynamic

of Cloud Security Knowledge, Ellie is poised to deepen

and ever-evolving field of cybersecurity.

her understanding of cloud security best practices and emerging technologies, further enhancing her

In evaluating job offers and career opportunities, Ellie

ability to safeguard sensitive data and mitigate

prioritises factors beyond mere remuneration, placing

cyber risks.

a premium on growth opportunities, a supportive work environment, and alignment with her personal

Beyond the confines of her professional endeavours,

values and aspirations. By surrounding herself with

Ellie places a strong emphasis on maintaining a

leaders and peers who champion each other and

healthy work-life balance—a feat made possible by

foster a culture of collaboration, innovation, and

her organisation’s commitment to employee well-

inclusivity, Ellie seeks to continue making meaningful

being and flexibility. Through mindfulness practices,

contributions to her organisation and the broader

self-care routines, and setting clear boundaries, Ellie

cybersecurity community.

strives to cultivate harmony and equilibrium in her daily life, ensuring that she remains both fulfilled in

Ellie Blackman’s career journey serves as a testament

her career and grounded in her personal life.

to the transformative power of passion, perseverance, and continuous learning—a journey marked by

Reflecting on her journey, Ellie offers sage advice

resilience, growth, and a relentless pursuit of

to aspiring cybersecurity professionals embarking

excellence in the pursuit of a safer and more secure

on their own career paths. She emphasises the

digital future.

importance of self-belief, resilience, and a willingness to embrace challenges as opportunities for growth www.linkedin.com/in/ellie-blackman-704635122

Interested In Working Together?

Data Admin Services

Content

Media

Advertising

Events

Custom

Special Offer!!

New client data admin programs 15% Off

The team at Source2Create has all the necessary skills to get the job done for you, so your time can be reserved to focus on other things.

We can execute anywhere in Australia, reach out today for an instant quote.

I S S U E 20

aby@source2create.com.au

source2create.com.au

charlie@source2create.com.au

WOMEN IN SECURITY MAGAZINE

29

Madhuri Nandi Head of Security at Till Payments | Board Member, AWSN | Creator of ITSA (IT Security Awareness Framework)

Late-night shifts became the classroom where I learnt to monitor alerts, analyse logs and devise proactive strategies to mitigate risks. My journey was marked by a steadfast commitment to learning and adapting.

E

My expertise expanded across diverse security domains: from SOC, engineering and compliance to mbarking on my journey in cybersecurity

risk management as I recognised the importance of a

in 2007 as a campus graduate, little did I

holistic approach to cybersecurity.

anticipate the twists and turns that would shape my unconventional path within

A MOVE INTO RETAIL

this dynamic field. As an accomplished

My journey took a new turn when I moved into the

identity, security, technology risk and compliance

retail sector where I continued my exploration of

leader, my story is one of resilience, innovation and

PCI compliance by implementing and maintaining

an unwavering commitment to fortify organisations

various security controls. Joining a product company

against evolving threats. Today, I am honoured to

that had made multiple acquisitions proved pivotal

share my insights and experiences with the esteemed

for my learning, particularly in assessing the risks

readership of Women in Security Magazine and reflect

associated with mergers and demergers. I broadened

on the transformative power of comprehensive

my understanding of business requirements and the

cybersecurity leadership.

critical role security plays in planning operations for business success.

30

MY STEPS INTO THE REALM OF SECURITY BEGAN IN INDIA

One of the most intriguing lessons learnt during that

In 2005, during my third year of engineering, a

time was the art of delivering dynamic presentations.

campus placement led me down a path intended

I transitioned from static to dynamic presentations

to take me into database administration. However,

and realised the transformative impact these had

destiny had other plans, propelling me into the world

by capturing attention and fostering a deeper

of cybersecurity on day three of campus to corporate

understanding of security language. This shift

training. I was armed with little knowledge of security

proved instrumental in me earning my place among

but the support of my first manager and guidance

senior leadership and executives. Business leaders

from mentors became my beacon, propelling me

began actively engaging with and comprehending

into a realm where I would become adept at incident

the insights provided by my security reports. This

response, vulnerability management and governance,

heightened attention and understanding of security

risk and compliance (GRC).

continued to shape my journey.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

W H A T ’ S

H E R

J O U R N E Y ?

By the time I concluded my roles in India, I had

ASPIRATIONS REALISED

accumulated hands-on experience implementing

With exposure, experience and continuous learning,

various security products, in security engineering,

I aspired to define, implement and govern security

conducting application security testing, performing

for an organisation—a dream I have realised in my

pen testing, managing incident response, conducting

current role as head of security at a fintech.

risk assessments, enforcing, and adopting PCI controls and overseeing vulnerability management.

Fulfilling my commitment to continuous improvement,

I had also acquired skills in storytelling and delivering

I discovered a valuable community in AWSN, a space

dynamic presentations to senior leadership,

where I could connect with like-minded individuals

enabling them to gain a nuanced understanding

and contribute meaningfully. Motivated by a strong

of how security aligns with and contributes to

desire to elevate the importance of security in

business success.

executive discussions I applied for and secured a position as treasurer on the board of AWSN. I am

A MOVE TO AUSTRALIA

providing the benefit of my experience in critical

Arriving in Australia in 2013, I faced initial challenges

decision-making and fulfilling my longstanding desire

and biases during interviews. Undeterred, I

to understand the intricacies of a board director’s role.

persevered, gradually acquainting myself with the nuances of the cybersecurity landscape. Eager to

Now, as both a head of security and a board member,

expand my expertise, I pursued a master’s degree

I persistently advocate for robust security practices,

in digital forensics, gaining a comprehensive

ensuring these receive the attention and recognition

understanding of cyber law. During my first maternity

they rightfully deserve.

break, I founded my organisation, and gained valuable sales experience despite limited exposure to sales.

In closing, my journey demonstrates my

This was a transformative chapter in my career.

perseverance, adaptability and continuous passion for cybersecurity. Throughout this journey I have sought

Subsequently, joining an Australian retail giant

to inspire other women to carve their unique paths,

provided a platform to showcase my technical

overcome challenges and make a lasting impact

expertise. The role allowed me to refine my existing

on the ever-evolving landscape of cybersecurity.

skills and acquire new ones: cloud migration,

Together, let us fortify the future, and make it one

extended IT functions and others.

in which organisations thrive securely, guided by innovation, collaboration and an unwavering

A pivotal moment in my career was the creation

dedication to cybersecurity excellence.

of the IT Security Awareness (ITSA) framework, a comprehensive toolkit designed to measure and

I have held many roles in my career: associate

enhance organisational awareness of cybersecurity

engineer, specialist, risk analyst, founder, creator, non-

risks. This initiative underscored my commitment

executive director, information security manager, head

to driving cultural change and fostering a proactive

of security, product owner. My career has not been a

security mindset within organisations.

linear progression, but rather a journey in which each title represented a stepping stone towards increasing

Leveraging my background in building reliable

mastery of the digital landscape.

processes, I implemented robust security management frameworks. I championed initiatives aimed at strengthening the overall security posture

www.linkedin.com/in/madhurinandi/

of organisations, such as vulnerability management, securing web applications and conducting internal audits.

I S S U E 20

WOMEN IN SECURITY MAGAZINE

31

Ankita Singh Cyber Security Sales & Marketing at Cochlear

A

nkita, formerly a seasoned customer

she says. Amidst her myriad responsibilities

success manager at DXC Connect,

Ankita found solace in her unwavering focus and

describes her transformative journey

commitment to staying up to date with the latest

into cyber security. With over 14

technological advancements.

years of diverse experiences, Ankita’s

narrative offers profound insights into the intricacies

Ankita acknowledges grappling with uncertainties

of navigating this dynamic field. Since leaving DXC

about transitioning into cyber security. “When I

Anita has taken her first role in cyber security with

first thought of pivoting into cyber security, I had

Cochlear, managing data privacy and risk for the sales

a lot of doubts,” she admits. Questions about her

and marketing team. Her journey commenced with a

past experiences becoming obsolete and concerns

fervent desire to rekindle the deeply ingrained passion

about starting afresh loomed large. However, Ankita

for technical problem-solving she developed in her

remained resolute in her pursuit of a career in cyber

engineering days.

security, guided by a clear vision of her desired trajectory in cybersecurity. “For a long time, I had

“I started my career in a technical role but moved into

been involved in delivery roles supporting customer

various non-technical roles until I realised my passion

outcomes,” she says.

was for learning and solving complex problems,” Ankita recalls. This introspection led her back to the

Looking ahead, Ankita anticipates significant

technical sphere, with cyber security emerging as a

developments in the cyber security landscape,

compelling domain in which to realise her aspirations.

such as a growing need for robust monitoring tools and heightened awareness of privacy laws. When

Ankita’s pivot into cyber security was not without

evaluating possible career advancements, ahead

its challenges. “The biggest challenges have been

of monetary considerations Ankita prioritises a

building trust and relationships and developing

company’s vision and its commitment to staying

the resilience to keep moving forward in my

abreast of industry trends.

career despite the demands of my personal life,”

32

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

At home, Ankita found unwavering support

For individuals embarking on a similar journey into

from her partner, who has been instrumental in

cyber security, Ankita’s story underscores the value

shaping her cyber security career. “My partner

of transferable skills and stakeholder management

has been a significant influence,” she says. His

experience. These attributes, she asserts, are

encouragement and belief in her abilities bolstered

indispensable for navigating the multifaceted

Ankita’s confidence, demonstrating the profound

landscape of cybersecurity.

impact a supportive environment can have on professional growth.

Ankita’s odyssey serves as a testament to the transformative power of resilience and the

In her quest to continue this growth, Ankita plans

importance of determination and a clear vision when

to pursue certifications such as CISSP, recognising

charting a course through the complexities of the

their pivotal role in fortifying her expertise and

cybersecurity domain.

career prospects.

Maintaining a harmonious work-life balance

www.linkedin.com/in/ankita-singh-a0b87929

remains paramount for Ankita, a feat made possible by a supportive environment and judicious time management practices.

I S S U E 20

WOMEN IN SECURITY MAGAZINE

33

Nigerian Stock Exchange, who was also the first female CISO in Nigeria.

EARLY INSPIRATION

Oluwatosin (Tosin) Fatokun Senior Security Governance and Strategy Officer at Paystack

W

“Her presentation about cybersecurity, her daily responsibilities and the exciting aspects of her job left a lasting impression on me,” Fatokun says. “At that moment, I knew cybersecurity was the career path I wanted to pursue, even though I was only in my first year of university.”

So, in addition to her university studies Oluwatosin studied for and gained several cybersecurity

hen asked what advice about

qualifications and dedicated time to researching

a cybersecurity career she

and gaining a deeper understanding of the field,

would give her high school self,

developing an interest in the specialisation that later

Oluwatosin (Tosin) Fatokun says:

became her career.

“Know what you want and go for it,

give it all it takes and focus on the positives. You don’t

“When I began my journey in cybersecurity, I didn’t

need to have it all figured out; clarity comes from

have a clear vision of the specific roles I aspired to.

taking action. All things are possible to those who

All I knew was that I wanted to work in cybersecurity,

believe and let go of limiting mindsets.”

and I was open to exploring all the options that came my way,” she says. My early work experiences

She adds: “Cybersecurity encompasses numerous

revealed my natural inclination towards governance

sub-fields, so take the time to research and explore

and strategy, which eventually became my chosen

them to determine where your interests and strengths

area of expertise.”

lie. In the early stages, focus on learning broadly rather than specialising immediately. This approach

Young Nigerians must dedicate a year contributing to

will help you build a strong foundation and find the

the nation. During her service year Fatokun continued

right path within cybersecurity.”

her studies and obtained certifications. “By the time I completed my education and service year, I had

She has certainly lived by those edicts: progressing

earned four certifications, including CompTIA Security

from her initial inspiration to pursue a career in

Plus and Certified Ethical Hacker (CEH),” she says.

cybersecurity while studying for a Bachelor of Science

“These certifications greatly impressed prospective

in computer science at Nigeria’s Covenant University

employers and demonstrated my commitment to the

to her current role as senior security governance and

field by going beyond mere interest and putting in the

strategy officer with Paystack, a company providing

necessary work.”

payment services to more than 60,000 companies in Africa.

She also actively engaged with the cybersecurity community through networking events, conferences

34

The spark that ignited Oluwatosin’s cybersecurity

and online forums, and sought out mentors and

career was a talk she listened to while studying

industry professionals who provided valuable

at university. It was given by the then CISO of the

guidance and insights.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

W H A T ’ S

H E R

J O U R N E Y ?

CAREER PREPARATION

know everything from the start,” she says. “Begin by

Oluwatosin made considerable efforts to understand

becoming a security champion on your team and

how she would leverage her knowledge and skills into

embrace curiosity, because cybersecurity is a field for

a role working in cybersecurity, conducting extensive

lifelong learners. It’s impossible to know everything,

research on how to break into the industry, including

so start from where you are and gradually expand

how to land her first job and preparing for interviews.

your knowledge.”

“I vividly remember my first interview. I had prepared

A REWARDING ROLE IN GRC

by jotting down key points on a piece of paper, which

Of her current GRC role as senior security governance

I kept in my wallet for revision. During the interview, a

and strategy officer with Paystack, Oluwatosin says: “I

question came up that I couldn’t recall, so I asked the

find it incredibly rewarding to develop strategies that

interviewer if I could check my notes. He agreed, and

not only protect our organisation’s digital assets but

after refreshing my memory, I confidently explained

also contribute to its growth and success.

the answer, ultimately securing the job.”

“Additionally, being able to navigate complex Oluwatosin started her career in penetration testing,

security requirements and regulatory obligations

but soon discovered her real passion. “I moved to

across several African countries gives me a sense

security operations, where I realised that my true

of accomplishment. Overall, knowing that my work

interest lay in developing strategies, defining metrics,

directly impacts the organisation’s ability to achieve

documentation, and reporting” she says.

its objectives and protect its stakeholders is what I find most fulfilling.”

“My manager noticed this inclination and offered me the opportunity to work with the governance,

And having realised her ambition to gain a role in

risk and compliance (GRC) team. Joining the GRC

GRC, Oluwatosin says she still works to build and

team felt like coming home: I had found my niche

update her skills, devoting time to taking courses

in cybersecurity.”

and pursuing certifications that help her stay informed about new technologies and best practices

In addition to remuneration and alignment with career

in cybersecurity. She also participates in various

goals, Oluwatosin lists company culture as one of

cybersecurity platforms where the latest security

her top priorities when considering a role. “Evaluate

developments are shared, and she engages in

the company’s culture and values to ensure they

knowledge and experience-sharing groups, which, she

align with your own. A positive work environment

says, are invaluable for navigating the complexities of

will significantly impact your job satisfaction and

cybersecurity and discussing ideas with peers.

overall well-being. Also look out for opportunities to develop new skills, take on leadership roles, or

“Most technologies are built with an emphasis on

work on challenging projects that will further your

function and purpose without due consideration for

professional growth.”

the security implications. As a result, new technology tends to be a source of new vulnerabilities and may

As for challenges along the way, Oluwatosin puts

even itself be a threat agent within an information

imposter syndrome “a common challenge, even

system. As companies scale and try to strike a

among seasoned professionals, don’t let it get the

balance between hiring and automation, there’ll be

best of you, you won’t be there if you’re not good

an increasing use for third-party tools which pose a

anyways.” high up the list.

significant measure of risk to their organisations.”

“If you’re looking to transition into cyber security, it’s important to remember that you don’t need to

I S S U E 20

www.linkedin.com/in/oluwatosin-fatokun

WOMEN IN SECURITY MAGAZINE

35

Thank You

TO THE SPONSORS OF THE

024 2Australian

WOMEN IN SECURITY AWARDS ®

Now in its sixth year, the Australian Women in Security Awards® brings together the security industry to celebrate and elevate the profile of the Australian IT Security, Cyber, and Protective Security sectors.

This event serves as a beacon of inspiration, encouraging young women, men, and non-binary individuals to explore rewarding careers in this dynamic field.

OUR SPONSORS PROUD SPONSOR OF THE BEST SECURE CODER AWARD CyberCX is the leading provider of professional cyber security and cloud services across Australia and New Zealand. With a workforce of over 1,300 professionals, we are a trusted partner to private and public sector organisations helping our customers confidently manage cyber risk, respond to incidents and build resilience in an increasingly complex and challenging threat environment.

Through our end-to-end range of cyber and cloud capabilities, CyberCX empowers our customers to securely accelerate opportunities in the digital economy. Our services include: consulting and advisory, governance, risk and compliance, incident response, penetration testing and assurance, network and infrastructure solutions, cloud security and solutions, identity and access management, managed security services and cyber security training.

PROUD SPONSOR OF THE BEST SECURITY STUDENT AWARD At AusCERT, we’re passionate about data security and keeping your information safe. That’s why we deliver 24/7 service to our members alongside a range of comprehensive tools to strengthen your cyber security strategy.

From the start of AusCERT, we’ve continued to develop our systems and our culture to be the best it can be. Our range of services accommodate all areas of network security for your organisation.

Our culture will be the reason you love us though. If you’re looking for a CERT or for a company that really gets you you’re looking in the right place.

PROUD SPONSOR OF THE BEST INDUSTRY INITIATIVE THAT SUPPORTS DIVERSITY, INCLUSION & EQUALITY AWARD AustCyber’s mission is to support the development of a vibrant and globally competitive Australian cyber security sector. In doing so, we will enhance Australia’s future economic growth in a digitally enabled global economy.

AustCyber exists to grow Australia’s cyber security ecosystem, export our cyber security to the world, and make Australia the leading centre for cyber-education. For more information, visit: www.austcyber.com.

PROUD SPONSOR OF THE UNSUNG HERO AWARD As one of Australia’s leading life insurers we’ve learnt that the most important part of life isn’t the stuff we own, but the experiences we share with the people we love. It’s living life. This Australian life.

That’s why we do what we do, protect people, not things, to help you look after what matters most. From covering your children’s education, to keeping up the mortgage payments for the family home or rehabilitation to get you back on track sooner.

Together with our partners we protect more than 5 million customers and their families, helping them look after what matters most, so they have the freedom to keep living the life they planned.

PROUD SPONSOR OF THE ONE TO WATCH IN PROTECTIVE SECURITY AWARD Sekuro is a cyber security and digital resiliency solutions provider that helps CIOs and CISOs take a strategic approach to cyber security risk mitigation and digital transformation. Operating at the intersection of the digital technologies and cyber security industries, Sekuro reduces cyber risk while new technologies are adopted ultimately building business resiliency and enabling fearless innovation.

Our six practice areas (Strategy and Architecture, Governance, Risk and Compliance, Technology and Platforms, Offensive Security, Managed Security Services and People and Program Enablement) are full of the brightest minds in the industry. They work together to look beyond the threat landscape of today and into an opportunity landscape of tomorrow.

PROUD SPONSOR OF NETWORKING AT THE 2024 AUSTRALIAN WOMEN IN SECURITY AWARDS At NAB, relationships are our strength. We are here to serve customers well and help our communities prosper.

More than 38,000 colleagues at the bank provide 10 million customers with secure, easy and reliable banking services. More than 90% of the Group’s workforce are in Australia and New Zealand, with the wider team located in parts of Asia, London, New York and Paris.

Our scale and connectivity help us to tackle some of the most significant challenges facing our business and community. Cyber security is of utmost importance to our organisation, and NAB’s Group Security teams are committed to helping our communities prosper and provide safe banking. To achieve this, we aim to hire the best talent and create a culture where colleagues can grow.

Central to our success is the strength and diversity of our teams. NAB is a proud champion of women working in the security industry and proudly supports the Australian Women in Security Awards.

EMERALD SPONSOR At Equifax (NYSE: EFX), we believe knowledge drives progress. As a global data, analytics, and technology company, we play an essential role in the global economy by helping financial institutions, companies, employers, and government agencies make critical decisions with greater confidence.

Our unique blend of differentiated data, analytics, and cloud technology drives insights to power decisions to move people forward. Headquartered in Atlanta and supported by nearly 15,000 employees worldwide, Equifax operates or has investments in 24 countries in North America, Central and South America, Europe, and the Asia Pacific region.

EMERALD SPONSOR Netskope, a global SASE leader, helps organisations apply zero trust principles and AI/ML innovations to protect data and defend against cyber threats. Fast and easy to use, the Netskope platform provides optimised access and real-time security for people, devices, and data anywhere they go. Netskope helps customers reduce risk, accelerate performance, and get unrivalled visibility into any cloud, web, and private application activity. Thousands of customers trust Netskope and its powerful NewEdge network to address evolving threats, new risks, technology shifts, organisational and network changes, and new regulatory requirements. Learn how Netskope helps customers be ready for anything on their SASE journey, visit netskope.com.

024 2Australian

WOMEN IN SECURITY AWARDS ®

Join forces with these industry trailblazers at the Australian Women in Security Awards!

Be part of a powerful movement driving change and championing diversity in the security sector. Elevate your brand alongside visionary leaders and make an impact that resonates far beyond the boardroom. Together, let’s pave the way for a safer, more inclusive future!

SPONSOR NOW

Nominations close

June 30

th

Tickets on sale now!

2024

NOMINATE

TODAY

BUY TICKETS

Nonye Anyanwu IT GRC Specialist

N

onye Anyanwu, an IT Compliance

safeguarding trust, innovation, and the very fabric

Officer with a wealth of experience in

of our digital society,” she explains. “Understanding

cybersecurity, has journeyed through

this broader significance has been a driving force in

the digital landscape with a profound

my journey.”

fascination for technology guiding

her every step. From her earliest encounters with

When she first embarked on her cybersecurity journey,

computers, she was captivated by their inner

Nonye didn’t have a clear vision of the specific roles

workings and the boundless opportunities they

she aspired to. Instead, her path unfolded organically

presented. Reflecting on her journey, she shares,

as she delved deeper into the field. “I found myself

“Technology has always been a passion of mine.

naturally gravitating towards certain aspects of

I was drawn to its complexity and the endless

cybersecurity,” she reflects. “I developed a passion for

possibilities it offered from a very young age.”

understanding and addressing digital threats, which ultimately led me to specialise in IT Governance, Risk,

As she advanced through her education, Nonye’s

and Compliance.”

interest in cybersecurity continued to burgeon. When the opportunity to study cybersecurity presented

For Nonye, building a strong foundation in

itself during her university years, it felt like a natural fit

cybersecurity involves more than just technical

for her burgeoning passion. “Studying cybersecurity

expertise—it requires a blend of technical acumen and

in university felt like the perfect convergence of my

soft skills. “Technical skills are essential, but equally

interests and aspirations,” she recalls. “It allowed me

important are soft skills like communication, problem-

to delve deeper into the realm of technology while

solving, and ethical decision-making,” she advises.

addressing real-world challenges.”

“These skills enable cybersecurity professionals to navigate complex challenges and collaborate

Over time, Nonye’s interest in cybersecurity evolved

effectively with colleagues.”

beyond a mere fascination with technology to

40

encompass a profound appreciation for its critical

In her role as an IT Compliance Officer, Nonye

importance in the modern world. “Cybersecurity isn’t

discusses the importance of aligning personal

just about protecting systems and data; it’s about

values with organisational culture. “Company culture

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

W H A T ’ S

H E R

J O U R N E Y ?

plays a significant role in job satisfaction and long-

with peers, engaging in security communities, and

term success,” she asserts. “It’s essential to find an

staying abreast of the latest developments in IT.

organisation that shares your values and supports

“Continuous learning is essential in cybersecurity,”

your professional growth.”

she emphasises. “The field evolves rapidly, and staying informed is crucial to effectively address

When considering future professional growth,

emerging threats.”

Nonye is proactive about pursuing certifications and qualifications that will enhance her expertise.

Reflecting on her journey, Nonye offers invaluable

“Certifications like CISA and CISM provide valuable

advice for individuals transitioning into cybersecurity

credentials and deepen my understanding of auditing,

from other professional backgrounds. “Consistency,

control, and assurance in information systems,” she

practical experience, and relevant certifications

notes. “Continuing education is vital in a field as

are key,” she advises. “But don’t underestimate the

dynamic as cybersecurity.”

value of transferable skills—qualities like problemsolving and communication are highly sought after in

What brings Nonye the most satisfaction in her

cybersecurity roles.”

role is the tangible impact she makes in enhancing cybersecurity posture and ensuring regulatory

In essence, Nonye Anyanwu’s journey in cybersecurity

compliance. “Knowing that I’m contributing to the

exemplifies the transformation of passion into

security and compliance landscape is incredibly

purpose—a journey marked by continuous learning,

fulfilling,” she states. “Collaborating with cross-

adaptability, and a steadfast commitment to securing

functional teams allows me to leverage diverse

digital assets in an ever-evolving threat landscape.

perspectives and drive meaningful change.”

To stay current and effective in her role, Nonye adopts

www.linkedin.com/in/nonye-anyanwu

a multifaceted approach that includes networking

I S S U E 20

WOMEN IN SECURITY MAGAZINE

41

CRAIG FORD Head Unicorn – Cofounder and Executive Director, Cyber Unicorns. Australian Best Selling Author of A Hacker I Am, Foresight and The Shadow World book series. vCISO – Hungry Jacks, Wesley Mission, PCYC, Baidam Solutions and Ipswich City Council.

Member of the Board of Directors – AISA (Australian Information Security Association).

C O L U M N

Don’t Wait, Your Time is Now I am sitting here, thinking about the theme of this edition of the Women in Security magazine - “The Future is Now,” trying to figure out what I want to write on this topic in my regular column, and it got me thinking.

How much time do we waste procrastinating about things in our lives? I’m not talking about me procrastinating on my column topic; I mean about real things in our lives.

As many of you would already know, I have taken

generate something that I have been talking about for

what you might call a leap of faith. I have co-founded

years. I want to create a cyber awareness program

Cyber Unicorns with my wife, Melissa, in the second

that will generate real behavior change in the general

half of 2023. I left the comfort of a good job with a

population, like the slip-slop-slap campaign in

good company that I still love and still do regular work

Australia did in the 90s.

with via my new company. Why on earth would I do such a thing, leave a secure job with no guarantees of

Now, I think that is great, but I am not here to do a

success or long-term stability for my family?

promo about Cyber Unicorns; that’s not the point. If that’s not my point, then what is my point then do

PASSION AND A NEED TO CREATE CHANGE

you say? Well, let me tell you. I have been thinking

It is literally that simple. It’s something that is

about this for at least 3-4 years. Anyone who has

part of my core and is something many of you

listened to any podcasts that I have been a guest

would already know about me. I want to make a

on over the last couple of years, I have mentioned

difference, especially in diversity and education in

it. A desire to spread basic cyber safety knowledge

the cybersecurity space. The reason Cyber Unicorns

to everyday people and kids. The journey started

was born was to help create cyber education and

with my three different book series (A Hacker I Am,

awareness in several areas: small businesses, moms

Foresight and The Shadow World), and I knew that it

and dads, kids, seniors, and the general population

was just the start of what was needed. That means

overall. As a business, we have invested quite a bit

for approximately three years I procrastinated on

to build an online training platform as part of the

this problem, this initiative that I knew I needed to

Cyber Unicorns website and an app to be able to

take on. I talked about it and likely thought about it

access it from your mobile devices. We have priced

many times over the years but didn’t make a move to

them so that they will be affordable for all. We are

tackle it.

not in this to make money (yes, I still need to feed

42

my family so they aren’t free - money is something

It is, in the end, a reason so many people don’t

we all need at least a little of to survive). I want to

achieve their goals or dreams; we sit on them and

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

overthink them. We either think we are not capable

may take months or years to get it all lined up and get

or not good enough to achieve what we desire to

ready to take that final step; there may never be a final

accomplish, or it is too risky. I have a good job, I have

step if you are like me. I am always pushing, always

a family to support. It is not possible. I am telling you

trying to look at what is next and start to prepare. The

it is. You can achieve your dreams; you can build a

future is Now, get your plan, and don’t take no for an

company or a career. The Future is Now.

answer ever. If it is important to you, really important to you, don’t wait for it to happen to you, make

Now before you all go and quit your jobs. Seriously,

it happen.

don’t do that. Figure out what you want to achieve, the pie-in-the-sky outcome. Now you have that, go backward from that time and figure out the real steps or blockers that you need to overcome to achieve it.

Be realistic, truly think about it all. Money to substitute income, qualifications, or experience in whatever it is you want to do (or experience in things that will help you achieve it if this is something not done before).

Know the steps, and know the risks and obstacles to

www.linkedin.com/in/craig-ford-cybersecurity

www.facebook.com/AHackerIam

twitter.com/CraigFord_Cyber

www.cyberunicorns.com.au

overcome. Now go start to put the pieces into place, it

I S S U E 20

WOMEN IN SECURITY MAGAZINE

43

BUILDING CYBERSECURITY PROWESS: GAMIFICATION, SELF-LEARNING, AND CTF COMPETITIONS

by Abigail Swabey

The hunt for skilled professionals continues to intensify especially within the cyber security industry.

Y

et recruiting and nurturing top talent

acquisition but also foster a sense of achievement

remain daunting tasks. Amidst the

and motivation, driving learners to continuously

persistent threat of cyber attacks it is

improve their skills and expertise.

imperative to cultivate a robust pipeline of cyber security experts equipped with

“Gamified self-learning portals provide an inclusive

the knowledge and skills to counter emerging threats.

and accessible avenue for individuals, including

An innovative approach gaining momentum in the

women, to develop critical cybersecurity skills in a

industry is the integration of gamified self-learning

supportive environment.”

portals and capture the flag (CTF) competitions to foster future cyber talent.

CTF COMPETITIONS: BRIDGING THEORY AND PRACTICE

GAMIFICATION: DRIVING ENGAGEMENT AND LEARNING

Capture the flag (CTF) competitions are simulated

Gamification has emerged as a potent strategy to

must navigate through intricate puzzles, exploit

captivate and motivate learners, transcending the

vulnerabilities and defend against simulated cyber

traditional boundaries of education. Organisations

threats. These competitions provide invaluable

such as Cybrary, Udemy and Pluralsight have

hands-on experience allowing participants to apply

embraced gamification to enhance their cyber

theoretical knowledge to real-world scenarios in a

security training offerings. Through the integration

controlled environment.

cyber security challenges where participants

of points, badges, leader boards and progress

44

tracking systems, learners are incentivised to actively

CTF competitions are hosted by various

participate in their educational endeavours. Gamified

organisations, including universities, cybersecurity

self-learning portals not only facilitate knowledge

conferences and online platforms such as Hack

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

F E A T U R E

The Box, TryHackMe and OverTheWire. Participants,

of cyber defenders and bridge the skills gap in

ranging from cybersecurity enthusiasts to seasoned

the industry.

professionals, collaborate in teams or compete individually to solve challenges across multiple

DRIVING DIVERSITY AND INCLUSION

categories, including cryptography, reverse

One of the most compelling aspects of gamified

engineering, web exploitation and forensics.

self-learning portals and CTF competitions is their potential to promote diversity and inclusion

“CTF competitions offer a unique opportunity to apply

within cyber security. Organisations like Women

theoretical knowledge in practical settings, fostering

in Cybersecurity (WiCyS), the Australian Women in

problem-solving skills and building resilience in the

Security Network (AWSN) and New Zealand Network

face of cyber threats.”

for Women in Security (NZNWS) actively encourage women to participate in CTF competitions and

SYNERGY IN ACTION: REAL-WORLD EXAMPLES

provide support and resources to facilitate their

Several organisations have embraced the synergy

involvement. By creating a welcoming and supportive

between gamified self-learning portals and CTF

environment each association aims to empower

competitions to nurture cyber talent effectively. For

women to pursue rewarding careers in cyber security.

instance, the SANS Institute, a renowned provider of cyber security training and certification, offers a

The integration of gamified self-learning portals and

gamified platform called NetWars which combines

CTF competitions represents a promising approach

self-paced learning modules with immersive CTF

to cultivating future cyber talent. By harnessing

challenges. Participants can hone their skills through

the power of gamification and hands-on learning,

interactive exercises and then put them to the test in

organisations can engage, inspire and empower

live competitions.

individuals from all backgrounds to embark on a journey towards cyber security excellence. As we

Similarly, CyberStart, another initiative of the SANS

embrace these innovative tools we can collectively

Institute, introduces high school and college students

work towards building a stronger, more inclusive

to cyber security through gamified challenges and

cyber security community equipped to tackle the

CTF activities. By gamifying the learning experience,

challenges of tomorrow.

CyberStart aims to inspire the next generation

I S S U E 20

WOMEN IN SECURITY MAGAZINE

45

Want to get matched with Lead Gen experts but dont know where to start?

Our solution experts can help you find the right supplier, Looking to streamline your B2B lead generation process?

Want to use multiple suppliers but dont have time to coordinate?

Need a consistent stream of leads coming into the sales team?

Looking to tap into new markets?

Need end-to-end lead nurture programs?

LET US HELP YOU OVERCOME YOUR LEAD GEN CHALLENGES REACH OUT TODAY FOR AN INSTANT QUOTE. The team at Source2Create has all the necessary skills to get the job done for you, so your time can be reserved to focus on other things.

With:

aby@source2create.com.au charlie@source2create.com.au source2create.com.au

INDUSTRY PERSPECTIVES

BELINDA NOEL

OT SECURITY: PROTECTING OUR MOST CRITICAL ASSETS TO SAFEGUARD OUR FUTURE

by Belinda Noel, Chief Growth Officer at Secolve

Operational technology (OT) is the backbone of

containers in ports. Increasingly OT is automating

our society. It’s the technology powering our water

these processes, reducing or eliminating the need

systems, electricity grids, manufacturing plants

for human involvement. Nor is OT limited to critical

and transportation systems. It’s the technology that

infrastructure: every industry is increasingly reliant on

underpins physical processes such a pumping water

operational technology for process and environment

from a reservoir to a suburb. Operational technology

monitoring and control.

is of great importance to our nation, and we must secure it from cyber threats.

OT cyber security is a relatively new field of cyber security, despite the fact that OT has been around

Cyber attacks pose a significant threat to essential

for many years. The abundance of OT and its

services like energy, water, food production and

growing interconnectivity with IT, such as in smart

ports, and the challenge of safeguarding the OT of

buildings, is fuelling the need to harden the defences

the critical infrastructure on which these services

of OT environments and better protect them from

rely is growing. The chaos a cyber attack on such

cyber threats.

services could cause by disrupting or disabling the facilities providing these services has heightened

SEVERE CONSEQUENCES

attention from government entities on the protection

The guiding principle of IT security is ‘CIA’:

of critical infrastructure.

confidentially, integrity and availability. OT security, in contrast, prioritises safety and resilience. Tampering

Operation technology is pervasive and essential to

with OT processes can have severe consequences

the functioning of critical infrastructure. It enables

that include the disruption of critical operations,

humans to monitor and control processes such

life-threatening safety hazards and long-lasting

as water pumping and purification, electricity

environmental damage.

generation and transmission, the movement of

48

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

I N D U S T R Y

P E R S P E C T I V E S

Even halting operations to mitigate an ongoing

Protection) Act 2022. This legislation is continually

cyber attack can have significant societal impacts.

reviewed to keep it up to date with the ever-evolving

This was vividly demonstrated in the Colonial

threat landscape.

Pipeline shutdown, an attack on the company’s IT infrastructure required its pumping operations to be

We are expecting further clarifications and

shut down, precipitating fuel shortages, disruptions to

modifications to the existing laws and guidelines to be

essential services like airports and ambulances, and

announced later this year. The SOCI Act now covers

widespread panic.

11,000 organisations. It has expanded the range of organisations regarded as critical from electricity, gas,

The Colonial attack was on its billing systems,

water and ports to include those undertaking data

not its infrastructure, yet the impact on that

processing, transport, and manufacturing.

infrastructure, and on those dependent on it, as massive. It’s not difficult to envisage the chaos that

These legislative amendments highlight the

would result from an attack directed specifically at

significant changes the landscape has already

critical infrastructure.

undergone, and how the Government is looking to uplift Australian cyber security across our

The importance of protecting our most critical assets

critical infrastructure.

cannot be overstated and the Australian Government is focussed on boosting the cyber security of

SHARED RESPONSIBILITY

Australia’s critical infrastructure. It has set several

Shared responsibility for security uplift is also a

major goals, including that, by 2030, Australia will be

major focus of the obligations under the SOCI Act.

the most cyber secure country.

It requires mandatory reporting of cyberattacks and implementation of a proven risk management

The Cyber and Infrastructure Security Centre (CISC) in

program, and it mandates government involvement

the Department of Home Affairs has driven regulation

in the event of a severe attack that could affect the

and legislation covering the security of critical

operation of critical infrastructure.

infrastructure. The Security of Critical Infrastructure (SOCI) legislation been expanded and amended over

In March 2023 CISC held its inaugural Cyber and

the past two years. Most recently with the Security

Infrastructure Security Conference. One of the most

Legislation Amendment (Critical Infrastructure

notable points to emerge from that event was a

I S S U E 20

WOMEN IN SECURITY MAGAZINE

49

statement taken from a report into the 9/11 terrorist

OT cyber security is crucial in today’s world, just like

attacks. The report concluded that these attacks

IT cyber security, and requires diverse talent, including

resulted from a failure of imagination: the US security

women. Merged OT and IT present new challenges

organisations failed to conceive the possibility

for those charged with protecting systems from cyber

of such an event. A similar lack of imagination is

threats, and the Australian Government is taking steps

common to the operators of many of Australia’s

to enhance OT cyber security through initiatives like

critical infrastructure and services.

the SOCI Act and mandatory obligations. Elevating cyber security awareness in critical infrastructure

Organisations already have strong processes

organisations is a key step towards reaching the

and policies in place around physical safety and

national goals of a secure digital ecosystem. To

natural disasters. The Government wants critical

ensure the stability of our society we need to take a

infrastructure organisations to take cyber security

proactive approach to OT cyber security, and we need

just as seriously and incorporate this mindset into

to do it together as a community.

their business risk management, just as they do their other business risks. Australia historically has had a more “she’ll be right, and our OT is safe” attitude,

ABOUT THE AUTHOR

but sentiment has begun to shift over the past few

Belinda Noel is the Chief Growth Officer at

years. Top-down management is further driving the

Secolve, the OT security specialists. She is

cyber security obligations of organisations. Boards

passionate about championing operational

and executives are now required to have awareness

technology security and highlighting the stories

of all their responsibilities for a secure and resilient

of the OT people who are at the core of protecting

critical infrastructure. The SOCI Act and the Australian

our nation’s critical infrastructure.

Government are a driving force behind this shift. As a result, we can begin to see organisations starting to treat their OT cyber security like their IT cyber security,, which is often a lot more mature.

50

W O M E N I N S E C U R I T Y M A G A Z I N E

www.linkedin.com/in/belinda-noel

M AY • J U N E 2024

Need Event Speaker Services

Tell us more about what YOU need....

Need an MC or host?

Looking for a keynote speaker?

Want to get matched with industry expert speakers?

Need speaker inspiration/ideas?

Looking for presenters or analysts?

Need your events speaker lineup managed end-to-end?

REACH OUT TODAY FOR AN INSTANT QUOTE. The team at Source2Create has all the necessary skills to get the job done for you, so your time can be reserved to focus on other things.

With:

aby@source2create.com.au charlie@source2create.com.au source2create.com.au

JO STEWART-RATTRAY

CYBER-SAVVY KIDS: TECH PROFESSIONALS CAN HELP FOSTER DIGITAL HEALTH

by Jo Stewart-Rattray, Oceania Ambassador, ISACA

We have bred a highly tech-savvy younger generation. Advances in digital entertainment and the development of sophisticated apps have attracted the attention of our youth, but COVID created a period of intense online learning unlike anything we’ve seen before.

Children as young as five were thrown in the ‘digital deep end’, receiving passwords, usernames, access to classroom chats and online learning tools. While best to adapt to the pressures of delivering a

CONNECTING TECH PROFESSIONALS WITH FUTURE LEADERS

curriculum online, looking back I wonder if we

I am an advocate for mentorship in our sector; the

missed an opportunity to explain what online safety

benefits are huge for both mentor and protegee.

entails and to emphasise the importance of good

Mentorship supports career development, under-

digital citizenship.

represented groups and business productivity.

The responsibility for instilling digital literacy and safe

Adapting the concept of mentoring to the younger

practices into the youngest members of society lies

cohort—by connecting tech professionals with

not only with educators and parents, but also with the

primary, secondary and tertiary students—has

wider tech community.

enormous potential to establish healthy and

educators and parents were doing their absolute

52

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

I N D U S T R Y

P E R S P E C T I V E S

safe digital habits and promote our exciting

Industry-school partnerships. Ongoing partnerships

industry sector.

between schools and tech companies can provide resources, mentorship and insights into the industry.

Professionals can help bridge the gap between knowledge and practical real-world application. In

Interactive workshops and seminars. Regularly

doing so they can serve as role models, sharing

scheduled events led by tech professionals can keep

insights into the importance of cybersecurity, the

students engaged and up to date with the latest in

ethical use of technology and the ramifications of

online safety and digital practices.

having a digital footprint.

Mentorship programs. Pairing students with Tech professionals and organisations have access

tech mentors who can offer guidance and career

to vast resources that can be invaluable to schools

advice, and model positive digital behaviour can be

and educational institutions. They can develop

highly impactful.

age-appropriate content on digital safety, provide input to interactive learning modules and sponsor

Entrepreneurial opportunities. Initiatives such as

talks and workshops. Such initiatives not only aid

incubator programs and innovation challenges that

education: they present students with an array of

focus on ethical and responsible tech development

possibilities within the tech sector, inspiring potential

can create avenues for students to engage

future careers.

in entrepreneurship.

Organisations such as the ISACA Foundation

Parental involvement. Educating parents about

promote connection between a global community

digital citizenship enables them to reinforce these

of digital trust professionals and the next generation

values at home and monitor their children’s online

of IT and cyber leaders though multiple initiatives,

behaviour effectively.

including academic scholarships focused on digital trust for undergraduate and graduate students.

These strategies can help our younger generations manage the digital landscape safely and confidently.

Strong collaboration between industry and educators

The goal is to not only protect them from the risks

can also help develop future entrepreneurs. By

associated with digital life but to empower them

supporting and encouraging young people to

to use technology to create a better future for

develop their own solutions to real-world problems

themselves and others.

we can help foster a sense of ownership and digital responsibility. Competitions like hackathons, in partnership with schools and tech firms, can provide

ABOUT THE AUTHOR

practical experience and teach the importance of

Jo Stewart-Rattray has over 25 years’ experience

innovation while maintaining ethical standards online.

in the security sector. As a director with BRM Advisory she consults on risk and technology

PROMOTING HEALTHY DIGITAL CITIZENS

issues with a particular emphasis on governance

Some of the ways we can work towards digital

and IT security in businesses. She regularly

responsibility include:

provides strategic advice and consulting to the banking and finance, utilities, healthcare,

Curriculum integration. Schools could consider

manufacturing, tertiary education, retail and

integrating digital citizenship into their curricula,

government sectors.

focusing on topics like online privacy, the permanence of digital actions, and the recognition of misinformation.

I S S U E 20

www.linkedin.com/in/jo-stewart-rattray-4991a12

WOMEN IN SECURITY MAGAZINE

53

SUSAN MCGINTY

ADVANCING THE CYBERSECURITY SECTOR THROUGH WORKFORCE DIVERSITY

by Dr Susan McGinty, CEO Aya Leadership

DIVERSITY IN CYBERSECURITY UNLOCKS INNOVATION

cybersecurity workforce. A more diverse and inclusive

Like other STEM industries, the cybersecurity sector is

workers to meet current and future skills needs; tap

facing a skills gap which will limit its ability to rapidly

into broader skills sets to understand and respond

innovate and adapt. The sector is not operating at full

to the behaviours of adversaries; leverage new

capacity: the under-representation of women prevents

perspectives that will be central to delivering adaptive

it accessing the full innovative potential of the

and innovative outcomes. The adaptive, innovative

workforce1. The complexity of skills required in the

and iterative nature of the cybersecurity sector

cybersecurity sector is growing, driven by evolution

will enable it to make positive progress on gender

towards a knowledge-based economy that prioritises

equity quickly.

workforce will create opportunities to: access more

data and information1. Also, a broader suite of skills and capabilities beyond the technical competencies

Having worked actively to expand gender diversity in

of STEM is required to address systems level

the sector for the past five years, particularly female

challenges and meet the industry’s wide range of

leadership representation, I welcomed the publication

cybersecurity needs that includes specialist skills in

of the 2023 Gender Dimensions of the Australian

governance, management and coordination.

Cyber Security Sector Report1 by RMIT University and the Australian Women in Security Network

54

The best way to unlock capability and innovation

(AWSN). It found women comprise only 17 percent

and access the full potential of the sector is to

of the cybersecurity workforce and have much lower

increase gender diversity and inclusivity across the

representation at the leadership level. These findings

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

I N D U S T R Y

P E R S P E C T I V E S

inspired me to help cybersecurity organisations with

Additionally, female leadership development supports

practical actions to implement some of the report’s

the embedding of diversity and inclusivity into culture.

recommendations designed to increase inclusivity

The presence of more women in leadership roles at

and diversity in the sector’s systems and culture.

all levels will draw other women into organisations and help them climb the leadership ladder, amplifying

FEMALE LEADERSHIP DEVELOPMENT STRENGTHENS DIVERSITY

attributes and behaviours that support a diverse

One of the key themes explored by the report relates

applied correctly, investment in female leadership

to career and leadership development pathways that

development rapidly increases the number of quality

promote gender equity. The report correctly identifies

leaders, creates a robust leadership pipeline and

women’s leadership programs and career mentoring

attracts, develops and retains competitive talent.

and inclusive culture at all leadership levels. When

as important initiatives to drive gender equity through the development and promotion of women.

Currently, only eight to nine percent of female cybersecurity professionals in Australia have

Leadership development is known to be a key

leadership development opportunities such as

enabler for women to achieve excellence in technical

leadership development programs and career

sectors and it supports women’s retention.

2,3

Female

mentoring available to them.1 This indicates a gap

leadership development is a means to attract

in the sector that invites additional investment,

and retain talent and unlock the entire workforce

not only in senior leaders, but in leaders at middle

potential, through:

management levels who are responsible for implementing gender equity policies,4 and in the

• improving women’s leadership skills.

emerging leaders of the future.

• demonstrating commitment to providing women with meaningful career pathways and

PATHWAYS TO LEADERSHIP DIVERSITY

opportunities.

For women in male-dominated industries and women

• expanding women’s contribution as leaders at all levels.

• reaping the decision-making, innovation and economic benefits of female leaders.

I S S U E 20

of colour, it can be challenging to find examples of leadership styles that resonate and encourage them to step into leadership. Without support for leadership development from a mentor or manager, it can be

WOMEN IN SECURITY MAGAZINE

55

Accelerate women into leadership roles though

Only eight to nine percent of female cybersecurity professionals in Australia currently have leadership development opportunities, including leadership development programs and career mentoring, available to them.

sponsorship and experiential development opportunities.

Embed leadership development and career progression through career planning.

Leadership development, particularly as part of structured and systemic change, must be underpinned by allocated resources, structured opportunities, support processes, investment from senior executives, accountability mechanisms and transparency measures.

The full Pathway to Leadership DiversityTM cycle was

difficult for women to know how to ask for leadership

explored in detail in a recent white paper, Advancing

development support, or what support to ask for.

the Cyber Security Sector: Pathway to a Diverse and Inclusive Cyber Security Workforce. It offers practical,

It is also important to understand that leadership

achievable actions to expand leadership diversity

occurs at all levels and does not require a leadership

at the organisational level, informed by research

title or management responsibility. Informal

and STEM industry best practice, and five years of

leadership roles within the cybersecurity sector

tailored female leadership development for women

include being an expert or adviser in a field of

in the STEM and security sectors, backed by strong

knowledge, a mentor, leading a collaboration or an

evaluation. Solutions are presented as an integrated

initiative, or being a committee member. These are

suite of strategies to address the development of

all important leadership development opportunities

emerging and established female leaders, specifically

for women.

from early- to mid-career. Real world approaches are showcased using examples from cybersecurity

To assist cybersecurity organisations, I have developed a Pathway to Leadership Diversity

organisations.

TM

model for women in cybersecurity that is evidence-

The white paper was launched in Canberra on 21

based and informed by best practice. It takes a

March alongside an inspiring panel discussion with

holistic approach that integrates formal, social and

diversity-leading organisations in cybersecurity

experiential learning approaches across four key

who shared their views on how to build a diverse

stages of development (Figure 1).

and inclusive cybersecurity workforce, including by leveraging female leadership. Panel members

Implement tailored leadership development for

included Laura O’Neill (MF&Associates), Trudy Bastow

female STEM leaders at all levels based on research,

(CyberCX) and Linda Cavanagh (AWSN).

best practice and women’s lived experience.

Access Advancing the Cyber Security Sector:

56

Augment leadership training with role models,

Pathway to a Diverse and Inclusive

mentors and networks, which are critical enablers to

Cyber Security Workforce at https://

the development of leadership skills for women and

ayaleadership.com/advancing-the-

for their career advancement.

cyber-security-sector-white-paper/

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

I N D U S T R Y

FIGURE 1: PATHWAY TO LEADERSHIP DIVERSITYTM 1.

RMIT University, Gender Dimensions of the Australian Cyber Security Sector – Report, 2023, https://www.rmit.edu.au/content/dam/rmit/au/ en/research/networks-centres-groups/centrefor-cyber-security/gender-dimensions-of-theaustralian-cyber-security-sector-report.pdf

2.

McGinty S, Women in STEM: Navigating Barriers to Leadership, 2021.

3.

The African Academy of Sciences, Factors

P E R S P E C T I V E S

Increasing the number of people with diverse skills, experiences and ways of thinking who are contributing their talent to the cybersecurity sector will expand the workforce and reduce the skills gap.

which Contribute to or Inhibit Women in Science, Technology, Engineering, and Mathematics in Africa, 2020. https://www.iavi. org/phocadownload/Factors%20which%20 Contribute%20to%20or%20Inhibit%20 Women%20in%20STEM%20in%20Africa.pdf 4.

Williamson S, Colley L, Foley M and Cooper R,

ABOUT THE AUTHOR

The Role of Middle Managers in Progressing

Dr Susan McGinty is an award-winning scientist

Gender Equity in the Public Sector, 2018.

and global STEM leadership development expert,

https://www.psc.nsw.gov.au/sites/default/

speaker and author, who is inspired to transform

files/2020-10/Middle%20Managers%20and%20

the profile of leadership in STEM and Security to

Gender%20Equity.pdf

achieve innovation sustainability, uplift women into leadership roles, and enable diversity and

www.linkedin.com/in/susanmcginty-ayaleadership

ayaleadership.com

I S S U E 20

equity in these sectors. She is the CEO of Aya Leadership and a Board member of Women in STEM Leadership.

WOMEN IN SECURITY MAGAZINE

57

LISA VENTURA

SHAPING TOMORROW FOR A SAFER DIGITAL WORLD: THE FUTURE FOR WOMEN IN CYBER SECURITY

by Lisa Ventura MBE, Founder – Cyber Security Unity

With technology dominating almost every aspect of

The Index listed the cyber security skills shortage as

our lives, cyber security is arguably one of the most

one of the top pain points for many CISOs across the

critical fields of expertise. As our world becomes

world. Globally there are around four million unfilled IT

increasingly digitised the need to safeguard our

and cyber security vacancies, according to (ISC)2, and

data and networks from cyber threats has never

the number is expected to rise much further by 2025.

been more crucial. However, despite the large global

(ICS)2 also estimates the cyber security workforce

cyber security skills gap and the increasing demand

needs to grow by a staggering 145 percent to meet

for cyber security professionals, women remain

the demands of organisations globally.

woefully underrepresented.

Fifty nine percent of respondents to ISACA’s State

WHAT IS THE CURRENT PICTURE FOR WOMEN IN CYBER SECURITY?

of Cyber Security 2023 report indicated their

According to the Global Cyber Security Index

significantly understaffed (ie they did not consider the

(GCI) report there is still a significant knowledge

specified team size to be adequate), and 71 percent

gap in many countries in terms of cyber security

said some cyber security positions within their teams

strategy formulation, awareness and culture, and

remain unfilled. In addition, 54 percent believe fewer

in cybercrime legislation, programs and incident

than half of all applicants for open cyber security

response infrastructure. In addition, there is also

positions are qualified for the job.

organisation’s cyber security team was somewhat or

a lack of capability and capacity to close all these knowledge gaps.

You might think, given there is such a huge cyber security skills gap, filling vacancies would be easy to

58

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

I N D U S T R Y

P E R S P E C T I V E S

do. However, this is definitely not the case, and for

Too many gender stereotypes. From a young age,

women in cyber security, the outlook is not changing.

societal norms often dictate which career paths are

According to the Women in Cyber Security report,

considered suitable for men and women. A belief that

sponsored by KnowBe4, women held only 25 percent

technology-related fields are more suited for men can

of cyber security jobs globally in 2022, which was up

deter women from pursuing careers in cyber security

from 20 percent in 2019 and from 10 percent in 2013.

and lead them to believe they lack the necessary skills

The report predicts women will represent 30 percent

or interest in technical subjects.

of the global cyber security workforce by 2025 and 35 percent by 2031.

A lack of female role models in cyber security. The scarcity of visible female role models and mentors

CHANGE IS HAPPENING, BUT SLOWLY

in cyber security further exacerbates the problem.

The landscape for women in cyber security is

Without representation at leadership levels or in

changing, but it is a very slow process. Over the

prominent industry roles, aspiring female cyber

past decade there has been a concerted effort to

security professionals may struggle to envision

bridge the gender gap in technology fields, including

themselves succeeding in the field. The absence

in cyber security. Initiatives aimed at encouraging

of relatable role models can also contribute to

more women to pursue careers in cyber security

feelings of isolation and inadequacy among women

have gained momentum, and the results are starting

considering careers in cyber security.

to show. Today, more women are entering the field, bringing with them diverse perspectives and skill sets

Unconscious bias. Unconscious bias, both within

that are invaluable in the fight against cyber threats,

educational institutions and workplaces, can manifest

but much more needs to be done to bring additional

in various forms such as assumptions about women’s

women into the cyber security industry. Despite the

abilities or suitability for certain roles. Biased hiring

increasing demand for cybersecurity professionals,

practices and workplace cultures that favour male

women remain significantly underrepresented.

employees can create barriers to entry for women in

Several factors contribute to this disparity: there are

cyber security. Women may encounter scepticism

systemic challenges that hinder women’s entry and

or resistance when seeking opportunities for

progression in cyber security careers.

advancement or leadership roles, further perpetuating gender disparities.

The lack of supportive environments. Hostile or unwelcoming environments within educational institutions or workplaces can deter women from pursuing or remaining in cyber security careers.

Instances of bullying, harassment, discrimination or microaggressions can create a hostile atmosphere that undermines women’s confidence and sense of belonging. Without a supportive environment that values diversity and inclusion, women may feel marginalised and opt to pursue alternative career paths.

Limited access to education and training. Access to quality education and training programs in cyber security can be limited for women, particularly those from underrepresented communities or low-income backgrounds. Socioeconomic factors,

I S S U E 20

WOMEN IN SECURITY MAGAZINE

59

including financial constraints and lack of access to

associations, governments and policymakers.

resources, can pose significant barriers to acquiring

Initiatives aimed at challenging gender stereotypes,

the skills and qualifications needed for entry into

promoting diversity and inclusion, are essential steps

the field. Without equitable access to educational

toward creating a more inclusive cyber security

opportunities, women may struggle to compete with

workforce. These initiatives should include the

their male counterparts for cyber security roles.

provision of mentorship and support networks and the provision of equitable access to education and

Challenges with work/life balance. The demanding

training opportunities.

nature of cyber security roles, characterised by long hours and high-pressure environments, can present

Oh yes, I’m the great imposter in cyber security.

challenges for women balancing career aspirations

One of the biggest challenges many women in

with familial or caregiving responsibilities. The

cyber security grapple with is feeling themselves

perception of cyber security as a male-dominated

to be imposters. Imposter syndrome is a pervasive

and inherently competitive field may discourage

phenomenon in many professions, and cyber

women from pursuing careers that require sacrifices

security is no exception. However, the impact of

in their personal lives. Employers must prioritise

imposter syndrome among women in cyber security

initiatives that promote flexibility and support work-

is significant because of various societal factors

life integration to attract and retain women in cyber

that compound these feelings of inadequacy and

security roles.

self doubt.

Cyber security’s ongoing image problem. The cyber

Furthermore, those societal stereotypes and

security industry is rife with images that depict

biases often contribute to women feeling they

script kiddies dressed in hoodies huddled over

must constantly prove themselves in order to be

their laptops, with much of this imagery being very

taken seriously in cyber security. This pressure to

dark and depicting a closed world that is difficult to

constantly demonstrate competence can exacerbate

break into. In addition, the frequent appearance of

feelings of imposter syndrome: women may worry

keys and padlocks in cyber security imagery is also

that a mistake or perceived failure of any kind will

problematic. Addressing these factors requires a

confirm them as imposters who should not be in

multifaceted approach that involves collaboration

cyber security.

between educational institutions, employers, industry Additionally, the fast-paced and constantly evolving nature of cyber security can contribute to imposter syndrome. The rapid advancement of technology means cyber security professionals must continuously learn and adapt to new threats and techniques. For women who already feel they are struggling to keep up, the prospect of falling behind can be daunting and reinforce feelings of inadequacy.

It is important for women in cyber security to recognise their experience of imposter syndrome does not reflect their actual abilities or qualifications.

Seeking support from mentors, colleagues and professional networks can help women in cyber security combat imposter syndrome by providing reassurance, guidance and opportunities for skill development.

60

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

I N D U S T R Y

P E R S P E C T I V E S

SO, WHAT DOES THE FUTURE LOOK LIKE FOR WOMEN IN CYBER SECURITY?

ABOUT LISA VENTURA MBE

The future for women in cyber security is slowly

Lisa Ventura MBE is an award-winning cyber

looking better, with more opportunities and a growing

security specialist, published writer/author, and

focus on closing the gender gap. Several industry

keynote speaker. She is the Founder of Cyber

trends are indicative of these improvements.

Security Unity, a global community organisation that is dedicated to bringing individuals and

They include:

organisations together who actively work in cyber security to help combat the growing

Increased awareness and initiatives. There is a

cyber threat. As a consultant Lisa also works

growing recognition of the importance of diversity in

with cyber security leadership teams to help

cyber security. Organisations are launching initiatives

them work together more effectively. She

such as mentorships programs and scholarships to

provides cyber security awareness and culture

encourage women to enter the field.

training and training on the benefits of hiring those who are neurodiverse. She has specialist

Fewer barriers and stereotypes. Women

knowledge in the human factors of cyber security,

are increasingly shattering stereotypes and

cyberpsychology, neurodiversity and AI in cyber.

demonstrating their excellence in cyber security. This paves the way for future generations to see cyber security as a viable and rewarding career path.

LISA ON SOCIAL MEDIA A larger talent pool. A more diverse workforce brings a wider range of perspectives and problem-solving

www.twitter.com/cybergeekgirl

approaches, ultimately leading to a more robust defence against cyber threats.

www.twitter.com/cybersecunity

More leadership roles becoming available. The

www.linkedin.com/in/lisasventura

number of women in leadership positions within cyber security is rising. They become role models who

www.facebook.com/lisasventurauk

inspire future generations and contribute to a more inclusive work environment.

www.instagram.com/lsventurauk

FINAL THOUGHTS

www.youtube.com/@CyberSecurityLisa/videos

The future for women in cyber security today is looking much better but ongoing commitment and

lisa@csu.org.uk

investment from the industry as a whole are required if progress is to be maintained. By embracing diversity and inclusion, providing support and opportunities

CYBER SECURITY UNITY ON SOCIAL MEDIA

for career growth, and leveraging the unique skills and perspectives women bring to the table we can

www.linkedin.com/company/csunity

build a safer and more resilient cyber ecosystem for everyone. The journey ahead for women in cyber

www.twitter.com/CyberSecUnity

security may be challenging, but the rewards offered by a more diverse and inclusive cyber security

www.facebook.com/CyberSecUnityUK

workforce are well worth the effort. We need to pave the way for a future where women play a leading role in securing our digital world.

I S S U E 20

WOMEN IN SECURITY MAGAZINE

61

MATT DUNHAM

FOSTERING FUTURE CYBER TALENT THROUGH GAMIFIED SELF-LEARNING PORTALS AND CTF COMPETITIONS

By Matt Dunham, Director at Decipher Bureau (Cyber Security Recruitment)

In an era dominated by digital advancements

is extremely popular with developers. More than

cybersecurity has emerged as one of the most

400,000 developers are using it, and the company has

critical disciplines for ensuring the safety and

seen 100 percent year-on-year growth for its global

integrity of online systems. As the cyber threat

secure coding tournament.

landscape continues to evolve the demand for skilled professionals capable of defending against cyber

Gamified self-learning portals offer an engaging

attacks is at an all-time high.

and interactive platform for individuals to acquire and improve their cybersecurity skills. Unlike

To ensure we are preparing individuals for the

conventional educational methods—which may

complexities of modern cyber threats we need to

rely heavily on theoretical concepts and passive

supplement traditional education and training with

learning—gamified portals leverage gamification

new learning pathways. This need has produced

techniques to make learning more enjoyable and

innovative approaches such as gamified self-learning

effective. By incorporating elements such as points,

portals and capture the flag (CTF) competitions.

badges, levels and leader boards, these portals

These tools for fostering future cyber talent are very

transform the learning experience into an immersive

effective, and are gaining momentum. This is evident

journey in which users are motivated to progress and

from the success of companies such as Secure

continually improve.

Code Warrior. Its cyber security learning platform

62

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

I N D U S T R Y

P E R S P E C T I V E S

One of the key advantages of gamified self-learning portals is their ability to cater for a wide range of skill levels, from beginners to advanced practitioners.

Through a combination of tutorials, interactive challenges and real-world simulations, users can gradually build their knowledge and expertise in various areas of cybersecurity, including network security, cryptography, malware analysis and incident response. Moreover, the self-paced nature of these portals allows individuals to tailor their learning experience to their interests and objectives, fostering a sense of autonomy and ownership of their educational journey.

minded individuals, share knowledge and collaborate on future projects or initiatives.

VALUE OF CTF COMPETITIONS CTF competitions represent another valuable avenue

A good example of how highly regarded CTFs have

for developing cybersecurity skills in a practical and

become was BSides Canberra in late 2023 when more

competitive environment. CTFs simulate real-world

than 900 participants and 345 teams competed in

scenarios where participants must solve a series

the CTF competition over three days. One Sydney

of challenges to uncover vulnerabilities, exploit

headquartered company took 35 of its staff to the

weaknesses and defend against attacks. These

conference, demonstrating how important it viewed

challenges encompass a wide range of attack and

the conference, the CTF and the teamwork and

defence techniques, from reverse engineering and

networking it evoked

web exploitation to forensics and binary analysis.

They provide participants with exposure to diverse

The number of cyber security industry specialists

cybersecurity concepts and techniques.

attending these events, taking part and performing well in CTF competitions means they represent good

What sets CTF competitions apart is their emphasis

opportunities for individuals to showcase and refine

on hands-on experience and problem-solving abilities.

their skills and uncover new job opportunities. More

Unlike traditional exams or assessments, which may

and more organisations are holding CTF competitions

focus on memorisation and theoretical knowledge,

because they have identified these as a good way to

CTF challenges require participants to think critically

assess talent for their future cyber security hires.

and apply technical skills to achieve success. This practical approach not only reinforces learning but

In conclusion, gamified self-learning portals and

also cultivates essential skills such as analytical

CTF competitions play a vital role in fostering future

thinking, creativity and teamwork: qualities that are

cyber talent by providing engaging, practical and

invaluable in the field of cybersecurity.

accessible pathways for individuals to develop their skills, expertise and careers in cybersecurity.

Moreover, CTF competitions foster a culture of

By embracing innovative approaches to training

continuous learning and improvement, because

and skills development we can empower the next

participants are constantly exposed to new

generation of cybersecurity professionals to navigate

challenges and evolving threats. By participating

the complexities of cyberspace and safeguard the

in CTFs regularly individuals can refine their skills,

digital assets of organisations and society at large.

explore emerging technologies and stay abreast of the latest trends in cybersecurity. Furthermore, CTFs provide a platform for networking and community

www.linkedin.com/in/mattdunham

building, enabling participants to connect with like-

I S S U E 20

WOMEN IN SECURITY MAGAZINE

63

MARINA AZAR TOAILOA

PREGNANCY AND PROTECTIVE SECURITY DO MIX

By Marina Azar Toailoa, Security Operations

A lot of people believe you can’t be on active duty

care of myself and that would provide a healthy

in protective security when you’re pregnant, but my

work life balance. I decided to take a step back from

experience proved this belief to be false. Last year,

security management to make sure I was putting my

when I first learnt I was pregnant, I was over the

health first.

moon, but I knew I couldn’t continue the work I was doing and put in long hours while pregnant. I reached

I was able to work full time until I was eight months

a point last year where I was not enjoying my work

pregnant because of my manager, my team and a

and had lost my passion for the job.

partner who all supported me. The culture in the security team I joined made me want to go to work

64

My mental and physical health mattered most, so

every day and made me comfortable despite my

I needed to find a role and a workplace that would

constant morning sickness. The team members

allow me to continue doing what I love while taking

were able to help me work hours that suited me and

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

I N D U S T R Y

P E R S P E C T I V E S

undertake tasks that did not compromise my safety. I

Returning to work a few months after the birth of my

was able to continue learning new skills and feel part

child was a smooth process because I had a return to

of the team. I was not treated any different because I

work plan that acknowledged where I was in my life

was pregnant.

and did not pressure me to work at full speed.

A lot of people would say to me “I hope you’re safe at

So, it is possible to work in a physical security role

work” because they knew the type of work I was doing

while pregnant, so long as your safety is always put

was not entirely safe, but I never felt safer. I always

first and you are in a team with a positive culture.

felt heard and, throughout my pregnancy, I was comfortable communicating how I felt. There was

I love the field I’m in and I don’t see myself leaving the

never a time my manager failed to help make things

security industry anytime soon. By trying new places

easier for me.

and new roles I learnt what works best for me. I am planning to continue building my career in security

SOUND ADVICE

management, but for now I’m enjoying the break while

My advice to anyone who is pregnant and working in

watching my two babies grow.

security is that life is much easier when you have a manager and team who work with you, not against you. I have always believed that my work should fit

www.linkedin.com/in/marina-azar-toailoa-66259511a

my life and I have been able to achieve that in my current workplace. It was not easy stepping back after working very hard to get into security management, but it was the best decision for my family at the time and I am happy I took that step.

I S S U E 20

WOMEN IN SECURITY MAGAZINE

65

KAREN STEPHENS Karen Stephens is the co-founder and CEO of BCyber. After more than 25 years in financial services, Karen moved into SME cybersecurity risk management.

She works with SMEs to protect and grow their businesses by demystifying the technical aspects of cybersecurity and helping them to identify and address cybersecurity and governance risk gaps. She was recently named inaugural Female Cyber Leader of the Year at the 2023 CyberSecurity Connect Awards in Canberra.

C O L U M N

Are you ever too young to start your cyber safety journey?

So, what age is too young to start someone on their cyber safety journey? I have been puzzled over this question for weeks as I prepared to write a few words on the topic. Should we be saying to parents: “you be you” and let everyone make their own decision? Or should we rely on the government to play big brother, step in and say: “this platform is not suitable for your children” (hello TikTok). I landed somewhere between the two. I know every parent wants to keep their children safe from harm, but sometimes their own actions do the exact opposite. As parents we need to educate ourselves and learn what is age-appropriate for our children.

3.

Protect your child’s privacy - play the long game. When you go to share something about

Let me explain. It is wonderful to share exciting news

your child, ask yourself “how will it impact my

and experiences such as a birth, adoption, starting

child’s future adult self?” This was brought home

a new school, graduation and the like, and wanting

rather starkly by Deutsche Telekom. It joined

to share the news far and wide is understandable.

forces with the creative agency adam&eveBerlin

However, putting everything out and about on social

to produce “Don’t share your kids personal

media is not such a good thing. The practice of

information without consent Deutsch Telekom

sharing your family news on social media platforms

Deepfake AI Ad” (Viewer discretion is advised).

does not take into consideration your role as your child’s privacy custodian. Some good pointers to be

In my world there is nothing like a real life example

mindful of include:

to bring it all home. So grab a hot beverage of your choice and get comfortable.

1.

2.

66

Be careful what you share. What you share may be used by people you don’t know for activities

Picture this. Your child has been invited to a playdate

you don’t condone. This article highlights some

by someone who pretty much shares their entire life

of the dangers.

on social media. Now you’re a bit old fashioned when

Think beyond the here and now. Social media

it comes to data privacy and have a strict no-social

has been around for a while and we are starting

media rule. This means no photos of the family are

to see children get to an age where they start

to be placed on any platform. The usual “please don’t

to question what has been shared about them

share any pics of my kid on any platform” request is

by their parents. Reddit posts like this one

made, and to get the point across you ask to have a

have started to appear and be picked up by

quick look at a few pics the couple has placed on its

mainstream media.

social media platforms.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

Now you’re not a ‘professional bad guy’ but after a quick browse you can work out their home address, cars, children’s names, school, ages, year groups, sports, interests, etc. Get the idea? While no social media postings of your family may have occurred on that day, you may never get another invite. This is called putting your family’s data privacy first. It is neither a popular nor an easy path.

After reading the above you may think I am a social media luddite who lives off the grid in the middle of

dotm.com.au/

nowhere. I am not. But I am hypersensitive and aware of the pitfalls of oversharing. Coming back to the original question, my answer is that you can never be

Join Today for FREE

too young to start your cyber safety journey. While the internet can be scary, it can also be a magical place of wonder. So, remember: • Start the cyber safety discussion early.

To NETWORK with other like-minded people

• Respect the age minimums of social media platforms.

• Provide practical advice to kids. For example, on good password hygiene and on adding friends to social platforms. (If you don’t know them in real life you don’t know them at all!)

To MEET prospective candidates for graduate programs

• Parental controls are their friend NOT something they need to “work around”.

• Model good behaviour. Your children are watching you and copying you. For example: no devices in bedrooms, no working around parental controls.

To MEET prospective employers of graduate programs

And my story? That may or may not have happened in real life. www.linkedin.com/in/karen-stephens-bcyber

www.bcyber.com.au

twitter.com/bcyber2

karen@bcyber.com.au

youtube.bcyber.com.au/2mux

I S S U E 20

The club is for security professionals (present, future and past)

WOMEN IN SECURITY MAGAZINE

67

Our Services Nurture Programs

Event Management

Magazines

Speaker Acquisition

Digital Marketing

Website Creation

Data Admin Services

Lead Generation

Programmatic

Podcasts

No job is too big or too small.

Get connected and take control of your business success today!

REACH OUT TODAY

charlie@source2create.com.au

aby@source2create.com.au

TECHNOLOGY PERSPECTIVES

DR. RIFAT ARA SHAMS

AI FOR ALL: MAPPING OUT THE JOURNEY FROM DIVERSITY ERRORS TO INCLUSION EXCELLENCE

By Dr. Rifat Ara Shams, Postdoctoral Fellow, Data61, Australia’s National Science Agency (CSIRO) Artificial intelligence (AI) is no longer the future; it’s

All these incidents display an unsettling similarity:

the present. Its applications sprawl across multiple

biases that are sexist, ageist and racist. However,

sectors. From disease diagnosis to personalised

bias in AI is not limited to sex, age or race; these

advertising, AI has not only influenced our lives, it has

examples are merely the tip of the bias iceberg. An

revolutionised them.

alarming number of AI incidents have arisen due to biases based on numerous other diversity attributes:

However, despite its widespread presence, have

from ethnicity and language to disability, religion,

you ever wondered why our daily interactions with

socio-economic status, political ideology, nationality,

AI sometimes leave us feeling uncomfortable due

geographic location, and many more.

to its seemingly inherent tendency towards bias and discrimination?

In the dynamic unseen world of AI, where innovation races ahead of understanding, countless AI incidents

Whenever Google Images misrepresents women’s

are shaking our world to its core. Security, privacy and

job roles or Google Photos abruptly labels black

technical issues are usually blamed, but we need to

Americans as ‘gorillas’, it’s the result of AI’s inherent

dig deeper and address the root cause; the alarming

bias and the complex ethical issues that come with it.

lack of diversity and inclusion (D&I) in AI design,

Even a popular platform like Tinder Plus stumbled and

development and deployment. The crisis begs us to

incorporated a discriminatory personalised pricing

collectively challenge the status quo and question

algorithm charging users aged over 30 higher prices.

the “what, why, how and where” of embedding D&I into the AI life cycle. As debate and dialogue around

70

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

T E C H N O L O G Y

P E R S P E C T I V E S

ethical and responsible AI intensifies, the integration

• a lack of attention to AI governance challenges

of D&I principles is becoming a moral imperative and

and solutions. Additionally, researchers from the

a necessary step to creating inclusive, unbiased and

US contribute heavily to D&I in AI research but

trustworthy technology.

those from countries like China, with leading AI development, are noticeably absent. Also, the

A DEEP DIVE INTO DIVERSITY AND INCLUSION IN AI

Global South, which has a very diverse population

Our latest research publication, AI and the Quest

under-represented.

whose members face many D&I challenges, is

for Diversity and Inclusion: A Systematic Literature

• tangible solutions to the D&I challenges created

Review (AI and Ethics, 2023), is a deep dive into this

by AI remain frustratingly sparse. This suggests

critical conversation. Through rigorous analysis of 48

greater collaborative efforts between developers

scholarly articles, we map out the challenges and the

and researchers and a wider exploration of

corresponding solutions to address D&I in AI and to

challenges and potential solutions are crucial

enhance D&I practices by AI. Our review aims to serve

to the development of a more equitable

as a roadmap for building an inclusive AI future.

AI landscape.

Policymakers, technologists and ethical AI advocates,

The fast-evolving AI landscape is at a crossroads of

it’s time to stand up and take note! The good, the bad

transformation. The path towards responsible, D&I

and the dynamics of D&I in AI – they are all there.

friendly AI starts with awareness, knowledge and

We identified a staggering 55 unique challenges and

resolve. Diverse and inclusive AI is not just a dream

33 solutions associated with D&I in AI, as well as

on the horizon; it is an attainable reality, one we

24 distinct challenges and 23 potential solutions to

must strive for collectively. The future of AI must be

benefit D&I practices by AI.

defined by a ‘world-for-all’ philosophy. Our systematic literature review sets out that path. It’s time for

Our literature review revealed:

change, one AI algorithm at a time. Let’s diversify AI together, and create AI that is unbiased and fair for all.

• a disheartening disparity in the focus of AI research projects: those exploring D&I in AI significantly outnumbered those leveraging AI to enhance D&I practices.

• a worrying pattern of neglected diversity

sites.google.com/view/rifatarashams?pli=1 scholar.google.com.au/ citations?user=fTalomgAAAAJ&hl=en&oi=ao

attributes. Although gender gets some attention, critical diversity attributes such as ethnicity, race,

www.linkedin.com/in/rifat-ara-shams

religion and language often get sidelined under the weight of biases. Therefore, it’s time to extend our focus beyond gender. The limited exploration of the many attributes of diversity underscores the urgent need for comprehensive research that includes intersectionality in AI studies.

• a dominance by the health sector in existing research. This suggests equally important fields such as law, education and others remain largely unexplored.

• a focus on facial analysis and natural language processing in AI systems at the expense of potential game-changers like voice recognition and large language models.

I S S U E 20

WOMEN IN SECURITY MAGAZINE

71

MEGHAN JACQUOT

THE TIME TO LEVEL UP IS NOW!

By Meghan Jacquot, Security Engineer, Inspectiv

Over the course of your career there will be lulls and

Whatever your role is, unless you’ve already fully

peak activity times. If you are not in a busy moment,

optimised all repetitive tasks you likely have a few

you will be at some time in the future. This is why

that could be aided by automation.

it is imperative to work on operational efficiency throughout your career. The time to level up is now!

EVENT TRIGGERS After you gather data regarding your repetitive tasks

When you are extremely busy it can be difficult

you need to come up with a way to represent them

to even dream of setting aside time to work on

visually. You can do this with freehand drawing or

productivity, but a half hour block once a week can

with diagramming tools. Draw.io is a great free option

become a game changer. When it is not a three fire

for creating a diagram of events. As you map out

alarm week, spending more time on these activities

a task, consider event triggers: what causes you to

can be extremely beneficial, but for now let’s examine

do the next thing. Figuring out cascading events will

what can be done with limited time.

enable you to design your automation later. You might need to make some adjustments based on choices

WHAT TO DO

made, but as you gain familiarity with your chosen

Start with data collection, at least two weeks’ worth,

tool your design process will adapt to it.

but a month’s worth is even better. Reflect on the repeated activities in your day-to-day life. Maybe you frequently write a similar message after a meeting, compose a document after a certain event or gather data from one place and then analyse it in a spreadsheet. Perhaps you have regular sections in a report and gather that data from multiple places, etc.

72

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

T E C H N O L O G Y

P E R S P E C T I V E S

CHOICES

Software Supply Chain State of the Union 2024, said

Choose an automation tool that works with your tech

their organisation used AI/ML-powered tools. Instead

stack and is approved by your organisation: you don’t

of completing a manual code review, could you run

want to introduce any shadow tech.

it through an AI-powered tool first? Could you use some penetration scanning tools that might give you

When choosing a tool, there are few things

additional context or suggestions on what to test for

to consider.

manually? If you’re a defender, could you analyse user behaviour data and look for anomalies?

• Does it involve coding?

• There are tools that can be custom built or ones that require a lot of coding.

When determining to use a model built by your organisation or another you should first figure out

• There are tools that have a low code interface that

what you are looking to accomplish, then decide

require minimal knowledge of things like html, JS

how you will assess if you have accomplished your

or Python.

goal. Afterwards, you can gather some data. Finally, complete a task with and without the AI tool.

There are tools that are no code, and that’s fine also.

QUESTIONS TO CONSIDER There are a few other questions you need to think

Will it save time? Are the results more

about. Does it meet your needs? Is it approved?

comprehensive? How’s the signal to noise ratio?

What’s the cost?

It’s best to prepare when you have downtime: you

REVIEW OF THE STEPS

never know how busy you will be in future and, if the

Step 1: gather data

future is now, you’ll want to have as many tools in

Step 2: analyse for trigger events

your toolbelt as you can. Carpe diem!

Step 3: choose an automation tool Step 4: build the automation

REFERENCES AND RESOURCES:

Step 5: test

• Draw io, https://app.diagrams.net/

Step 6: repeat

• JFrog report, Software Supply Chain State of the Union 2024, https://jfrog.com/software-supply-

Once you have used your chosen tool to diagram your events and their triggers you are well on your

chain-state-of-union/ • GitHub AI Tool, Code Scanning Autofix via Copilot

way to incorporating automation into your workflows.

and CodeQL, https://github.blog/2024-03-20-

The next step is to test what you have created. First,

found-means-fixed-introducing-code-scanning-

set up some tasks to see if the automation works

autofix-powered-by-github-copilot-and-codeql/

as expected. Then you’re ready to put these new

• BSidesSF Conference, “You Can’t Spell Dystopia

automations into practice. Keep those weekly blocks on your calendar and see if there are new and more challenging tasks you can automate.

without AI” theme, 4 to 5, May 2024 https://bsidessf.org/ • List of 2024 International AI Conferences, https://oxfordabstracts.com/blog/top-ai-

Also, don’t forget to celebrate. You’ve improved your

conferences-to-attend-in-2024/

workflows and hopefully worked towards a better work-life balance.

PRODUCTIVITY TOOLS In addition to automating workflows, another way to level up is to regularly use AI/ML productivity tools.

Ninety percent of respondents to a JFrog report,

I S S U E 20

www.twitter.com/CarpeDiemT3ch

www.linkedin.com/in/meghan-jacquot-carpe-diem

www.youtube.com/c/CarpeDiemT3ch

WOMEN IN SECURITY MAGAZINE

73

Need Data Admin Services

Tell us more about your data Need Data appending services?

Need database admin cleaning Data enrichment services

Data Entry Admin services Data Verification services

LET US HELP YOU OVERCOME YOUR BUSINESS DATA CHALLENGES PARTNER WITH A QUALITATIVE FAST-WORKING TEAM Our team understand the importance of time and efficiency when it comes to data projects.

With:

aby@source2create.com.au charlie@source2create.com.au source2create.com.au

STUDENT IN SECURITY SPOTLIGHT

I went to university with the intention of gaining real world experience to ensure I would choose a degree I would enjoy and would be competent in. For me this allowed me to fully investigate different areas of interest and without this time of observation I SOPHIE BUCHANAN

am confident I would not be studying within the Information Technology Field.

Sophie Buchanan is an expat who spent her formative years in Middle Eastern, African, Pacific, and Asian countries.

Currently, pursuing a Bachelor of Information Technology with a major in Business Information Systems. Sophie is in her penultimate year of studies, focusing on enhancing her expertise in this field.

Macquarie University IT Student

During this time, I applied to be a retail salesperson at a Tech company and by chance ended up in a Technical Specialist role and felt a deep passion towards it. I had never envisioned myself in these spaces and think that more exposure to STEM for women would open many up to a fulfilling career. So, for this reason I am glad I decided to do what was best for me and not feel pressured into going into uni straight away.

I do however wish I had selected another major

In a casual conversation with someone unfamiliar with the field, how do you articulate the excitement and potential of a career in cybersecurity, aiming to spark their interest?

to compliment my business info systems major

Cyber security is like being a digital detective where you always need to remain one step ahead.

What aspect of your Cybersecurity studies excited you the most and why?

You defend critical resources from hackers and

The aspect of Cybersecurity that excites me the

safeguard vital information whilst identifying hacker

most is the opportunity to make a tangible impact

motivations, areas of entry and strategies. It is fast

on protecting individuals, organisations and society

paced, ever-changing, and is crucial for protecting

from cyber threats. In today’s interconnected world,

businesses and individuals worldwide.

the ramification of a successful cyber-attack can

with such as cyber security or AI furthering my technical capacity.

be devastating, from financial loss to compromise

Recount the most memorable or significant event in your cybersecurity journey to date, highlighting why it left a lasting impression.

of personal privacy to disruption of critical

Using packet analysing services such as Wireshark in

digital future of company’s and individuals.

infrastructure. By taking a cyber security unit in my degree I learnt how cyber experts help safeguard the

real time allowed me to fully grasp the sheer amount of data being sent between individuals and networks

More specifically from my introductory cyber courses

online and the human reliance on technology to

I have gained a specific interest in threat types

safely transmit private information.

such as trojan horses, viruses and bugs as these pose more complex challenges to businesses due

76

Reflecting on your journey thus far, would you, with the benefit of hindsight, make any changes to your career trajectory? Id yes, what adjustments would you consider?

to fast replication and capacity for entire networks

After my Tertiary education I decided to work before

illegitimate programs.

W O M E N I N S E C U R I T Y M A G A Z I N E

to be quickly corrupted. This ties into my strong belief in staff training and identification which is needed for the everyday user to be able to spot

M AY • J U N E 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

Considering the holistic requirements of a future role, do you see the need for additional training in non-cyber skills, such as interpersonal communication or management?

If yes, why?

including resources and budget, identifies the extent

In the rapidly evolving tech landscape, where the

consultants must reduce information silos with

storage of larger data packets and automation are

their sharp interpersonal skillset. For these reasons

becoming more prevalent, cyber professionals face

investing in cyber professionals who can blend

the challenge of staying up to date with emerging

business acumen skills, including management,

tech, current cyber threats and industry accepted

creativity, and communication.

and feasibility of cyber-hygiene practices and policies post implementation. Additionally cyber hygiene best equips businesses to identify future errors before they arise and in order to encourage this cyber

protocols and policies.

planning of business protocols, idea generation and

The cybersecurity industry offers various certification from different organisations.

Have you pursued do you plan to pursue any of these certifications? If so, which ones, and what factors influenced your choice?

cyber hygiene training.

In the short term I am currently studying towards

Therefore, the need for non-cyber skills such as management and interpersonal communication is necessary for restructuring post cyber-attack,

taking the Microsoft AI 102 Exam which uses Azure For instance, during timely incident responses,

to design and implement AI solutions. With AI and

effective management ensures tasks are divided

open source playing a more significant role in cyber

and actions are concrete, and time bound before any

security in recent years I believe that being Microsoft

patching takes place. This is crucial for mitigating

AI certified would be advantageous in cyber areas

potential damages, allowing companies to regain full

such as predictive analysis and automation of big

control of company financial assets.

data trend spotting. Additionally studying to use cloud platforms such as Azure allows for a first-hand

Planning cyber strategies and business protocols

experience with cloud based services that are often

also necessitates interpersonal skills to collaborate

targets of business cyber-attacks.

with businesses effectively to best determine their cyber strategy. Understanding business needs,

After completing my time at Accenture’s 2024 Tech Bootcamp selected students received the opportunity to gain access to a Google Cyber Security 6-month course. I am yet to start this study but am keen to dive deeper into practical aspects of cyber security as taught by online Google Professionals before the final exam date in Feb 2025. This course focuses on SIEM tools, SQL, IDS, Linus and Python as well as common threat identification and mitigation techniques.

I am also open to any IT student suggestions on courses that helped them during their degree and excited to continue my learning throughout my career.

Are there any specific aspects of your cyber security studies that you find particularly

I S S U E 20

WOMEN IN SECURITY MAGAZINE

77

SOPHIE BUCHANAN

challenging? If so, what are they, and how do you approach overcoming these challenges?

Due to the broad nature of my Bachelor of Information Degree I see the capacity for professional exploration in areas such as Cyber security, Networking, Business information systems and coding/app development. With my degree giving me an introduction into so many technical branches, I struggle with knowing which area to further delve into as I have limited subject options in my flexible zone.

To mitigate this I engage in extracurricular competitions such as the Loreal Brandstorm, Startmate and Accenture tech Bootcamp to seek guidance from other STEM professionals, however I’m looking forward to joining the workforce to mitigate some of the limitations on my exploration and narrow down my interests with real world IT scenarios.

Have you ever encountered situations where being a woman in cybersecurity made you feel disadvantaged or discriminated against? If so please share your experiences.

Unfortunately to ignore the reality of bias within STEM fields would be naive. In my previous role as a technical specialist, a customer requested a male technician before I was able to start the appointment and introduce myself. This situation showed to me how often women are in positions that demonstrate their technical ability yet are not given the opportunity to showcase their skills due to gender bias. I believe that the best way to combat this bias is to start with education by fostering workshops and sponsorships with university societies and schools, as quotas - whilst well intentioned - may further the concept that women are not able to succeed in STEM landscapes unassisted.

www.linkedin.com/in/sophiebuchanan2021

78

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

Need a professional marketing, strategy and implementation agency that is dedicated, responsive, professional, creative, innovative, hardworking, and really cares about your business outcomes?

Then let us help YOU. REACH OUT TODAY FOR AN INSTANT QUOTE. The team at Source2Create has all the necessary skills to get the job done for you, so your time can be reserved to focus on other things.

With:

aby@source2create.com.au charlie@source2create.com.au source2create.com.au

nursing. Just as we assess patients’ behaviours, thoughts, and interests to provide effective care, cybersecurity involves understanding the motivations and vulnerabilities of potential threats.

ISABELLE HO

My passion for cybersecurity is palpable; it’s not just about technical challenges like hacking WiFi

Isabelle Ho’s upbringing was marked by a blend of cultures, having been born and raised in Australia while extensively travelling to Asia and Europe during her formative years. Her educational journey recently culminated with the completion of the Graduate Certificate in Cyber Security at UNSW, following her graduation from Purple Team Australia at the end of 2023. Currently preparing for the ISC2 CC exam, Isabelle’s aspirations extend further as she contemplates pursuing additional certifications such as cloud-based credentials or CompTIA Sec+. With the anticipation of her graduation ceremony at UNSW in May, Isabelle’s journey in cybersecurity continues to evolve with each milestone she achieves.

Purple Team Australia Graduate and Graduate Certificate in Cyber Security at UNSW

networks or navigating complex scenarios. It’s also about the thrill of solving puzzles, protecting digital spaces, and effectively managing high-pressure situations. This enthusiasm has sparked curiosity among my nursing peers, prompting them to consider whether transitioning into cybersecurity could be a viable option for them too.

To bridge the gap between healthcare and cybersecurity, I emphasise the shared skills and values between the two fields. Both require exceptional communication, risk assessment, and crisis management abilities. By highlighting these similarities, I aim to demystify cybersecurity and showcase its potential as a career path for those with diverse backgrounds, including healthcare.

Ultimately, cybersecurity is about protecting stories, identities, and lives in a digital context, much like nursing aims to heal and protect in the physical world. This perspective opens up new avenues for

In a casual conversation with someone unfamiliar with the field, how do you articulate the excitement and potential of a career in cybersecurity, aiming to spark their interest?

discussion, encouraging individuals to explore how

In casual conversations about the dynamic realm

natural curiosity sparked by sharing my own journey

Reflecting on your initial perceptions of cybersecurity when you first considered studying it, how does the reality of your experiences today compare?

and enthusiasm for the field. From delving into

Reflecting on my initial perceptions of cybersecurity,

capture the flag competitions to mastering phishing

I likened it to the mental health of IT—dealing with

attacks during university coursework, I convey the

risks, vulnerabilities, and malicious actors, viruses

excitement and depth of cybersecurity.

and worms, akin to diagnosing and treating the

of cybersecurity, especially with friends and colleagues in the healthcare sector, I’ve noticed a

their existing skills and values can contribute to the ever-evolving landscape of cybersecurity.

various ailments that could afflict the digital world.

80

In these discussions, I often draw parallels between

This analogy drew me in, with the allure of navigating

the strategies used in cybersecurity, such as

through a landscape marked by both slow-paced

phishing, and the nuanced understanding of human

analysis and high-adrenaline moments of critical

behaviour required in healthcare, particularly in

incident response. Despite my excitement, there were

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

apprehensions about fitting into a male-dominated

for continuous learning and adaptation. Despite the

field, especially coming from a nursing background

hurdles, the dynamic nature of cybersecurity and the

without formal IT training.

opportunity to apply my background in mental health in novel ways continue to fuel my enthusiasm and

Today, my experience in the field of cybersecurity has

drive for making a meaningful impact in this critical

largely validated my initial perceptions—it remains

and ever-evolving domain.

an exhilarating and rewarding domain. The reality

one part of the equation. The soft skills I’ve honed

Upon graduation, which specific cybersecurity role do you aspire to secure employment in, and what motivates your choice?

as a nurse, particularly in understanding human

My aspiration is to secure a role within a blue team.

psychology and behaviour, have proved invaluable.

I envision my journey starting as a SOC/security

These skills have enhanced my ability to navigate the

analyst, a foundational role crucial for honing skills

complex human elements inherent in cybersecurity,

in monitoring security alerts, analysing threats,

such as social engineering and human behaviour

and effectively responding to security incidents.

which inherently drives all actions.

I am particularly drawn to the dynamic nature

has unfolded to reveal the multifaceted nature of cybersecurity, where technical prowess is just

of monitoring network traffic and systems for However, the journey has also illuminated some

suspicious activities, a task that resonates with my

stark realities about the industry. While my passion

passion for safeguarding digital environments.

and the intriguing aspects of cybersecurity have only grown, navigating the job market as a newcomer

Progressing from a SOC/security analyst, my

has presented unexpected challenges. The widely

ambition is to delve into incident response. This role,

publicised shortage of cybersecurity professionals

focused on investigating and mitigating security

contrasts sharply with the reality on the ground,

incidents, appeals to me because it embodies the

where entry-level positions are scarce and the

proactive and impactful aspect of cybersecurity.

demand is heavily skewed towards individuals with

Implementing security policies, procedures,

mid to senior-level experience. This discrepancy

and technologies to protect an organisation’s

has highlighted the substantial investment in skills

environment is not merely a job; it’s a mission to

development, certifications, and practical experience

create a safer digital world. Utilising tools like SIEM

required to make a mark in this field.

solutions, firewalls, IDS/IPS, and endpoint security software represents tangible means through which I

Moreover, while the male dominance within

can contribute to this mission.

cybersecurity was anticipated, my journey has revealed a vibrant community of professionals advocating for diversity and inclusion. Discovering niches within cybersecurity that value a blend of technical and non-technical skills has been encouraging. It underscores the importance of a multidisciplinary approach and the unique contributions someone with a background in mental health can bring to the table.

In sum, the reality of my cybersecurity journey has been both challenging and affirming. It has reinforced my initial love for the field while also setting the stage

I S S U E 20

WOMEN IN SECURITY MAGAZINE

81

ISABELLE HO Ultimately, my goal is to evolve into a threat

mother to two young children, they viewed my career

hunter. This advanced position involves proactively

shift with apprehension, labelling it as a potential

searching for cyber threats not detected by

mid-life crisis. Their concerns centred around my

traditional security measures, representing the

ability to balance professional aspirations with family

pinnacle of my cybersecurity career aspirations. It

obligations, questioning the timing and feasibility of

demands a deep understanding of the adversary’s

such a significant change.

tactics, techniques, and procedures, making it both challenging and rewarding.

Addressing these concerns required a strategic and united approach with my husband. Together,

What distinguishes my aspirations is my unique

we engaged in extensive discussions, outlining

background in mental health. My experience in

our plan to manage the balance between family,

risk assessment and human psychology provides

work, and my studies. We prepared for various

me with a distinct perspective on identifying

scenarios, including the possibility of reassessing

vulnerabilities and weaknesses in an organisation’s

my decision if cybersecurity did not resonate with

security posture. I believe that understanding the

me as anticipated. By openly communicating our

human element—both in terms of potential threats

strategies and seeking their support, especially in

and within the team I will work—is crucial. My skills

caring for our children, we gradually turned their

in mental health can offer invaluable insights into

apprehension into backing. Their initial scepticism

behavioural patterns that could signify security

has since transformed into enthusiasm, particularly

risks, enhancing the effectiveness of the blue

as they witness my passion and achievements in the

team’s efforts.

field, although they occasionally inquire about when I’ll secure a job in cybersecurity.

In summary, my dream job within the blue team framework is fueled by a desire to apply my

My peers’ reactions ranged from surprise to

combined skills in cybersecurity and mental

encouragement. While some were taken aback by

health towards creating resilient, secure digital

my decision to return to studies, others expressed

environments. This blend of technical prowess and

confidence in my ability to transition into this new

psychological insight motivates me to pursue a

field, supporting me in

career path that not only challenges me but also

various ways throughout

contributes to the broader goal of enhancing cyber

this journey.

defence mechanisms.

Fortuitously, I have

When you decided to pursue a career in cybersecurity, how did your parents, peers, or career advisors react? Did you encounter any opposition, and if so, how did you navigate those challenges?

been blessed with an

When I made the decision to transition into

invaluable, providing encouragement

cybersecurity, the reactions from my family, peers,

and moral support as I juggle my

and career advisor were a mixed bag of support,

many responsibilities.

exceptional mentor from my nursing career who has consistently advocated for my well-being and happiness. His support has been

concern, and scepticism. Navigating through the

82

opinions and expectations of both sets of parents,

Ironically, the most significant

including in-laws, introduced a unique set of

opposition came from within. Doubts

challenges. Accustomed to my success in nursing

about the impact of my career change

and mindful of my responsibilities as a wife and

on my family and whether I could excel

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

in a new domain were constant companions. Yet,

is reflected in my achievements, such as securing

the unwavering support from my husband, friends,

the top spot in Purple Team Australia’s Capture the

and mentor bolstered my confidence, reminding me

Flag competition and earning high distinctions in

of the viability of pursuing one’s passions without

my university subjects. Moreover, my efforts extend

sacrificing the balance between work and family life.

beyond formal education to hands-on projects at home, where I dedicate significant time to applying

The journey from scepticism to support among my

and experimenting with newfound knowledge, all in a

parents and the affirmation of my peers and mentor

bid to honour his unwavering support.

underscored the importance of following one’s passion. My success in my studies and involvement

Furthermore, my current role as a mental health

in Purple Team Australia, capped by the honour of

nurse for Medibank has reinforced my resolve to

giving the graduation speech, have not only validated

make a difference in cybersecurity. Witnessing

my career change but also showcased the joy and

firsthand the aftermath of a data breach and its

fulfilment that come from pursuing a dream, no

profound impact on clients, staff, and the broader

matter the stage in life.

community has underscored the critical need for robust cybersecurity measures. The ensuing distrust,

Who or what has been the most influential factor in shaping your journey in cybersecurity so far, and how has it impacted your career aspirations?

reluctance to engage with services, and palpable

The most influential factor in my journey into

In summary, the blend of personal encouragement

cybersecurity has undeniably been my husband.

from my husband and the professional insights

His pivotal role in shaping my career path has

gained from my current role have not only shaped

been both foundational and transformative. It was

my journey into cybersecurity but have also deeply

he who introduced me to the captivating world of

influenced my career aspirations. This unique

cybersecurity during my maternity leave, urging

combination of support, firsthand experiences, and

me to delve into a book on social engineering. The

a fervent desire to contribute positively to the field

captivating narratives within this book, illustrating

motivates me to pursue a role where I can leverage

the intricate dance of social manipulation and its

my skills and experiences to safeguard and make a

far-reaching implications, struck a chord with me,

tangible difference in the lives of others.

anger highlight the urgent necessity for improved protection, especially for the most vulnerable.

echoing my experiences in mental health.

has stood as an unwavering pillar of support,

Recount the most memorable or significant event in your cybersecurity journey to date, highlighting why it left a lasting impression.

empowering me to navigate the challenges of

The most memorable and significant event in

balancing work, family, and personal growth. He

my cybersecurity journey has undeniably been

has been instrumental in fostering an environment

my participation in the Purple Team Australia

where I can pursue my passion for cybersecurity

cybersecurity program. This experience stands out

while also prioritising breaks and personal well-being.

for several reasons, but chiefly because it provided

His encouragement has propelled me to engage

me with the rare opportunity to connect with other

in various programs and pursue certifications,

women who share my interest in cybersecurity.

solidifying my commitment to this career change.

Discovering peers in similar life stages, with diverse

Yet, beyond sparking my initial interest, my husband

backgrounds and skill sets, yet united by a common His sacrifices and encouragement have ignited my

passion for cybersecurity, was both inspiring

determination to excel in this new field. This drive

and empowering.

I S S U E 20

WOMEN IN SECURITY MAGAZINE

83

ISABELLE HO The program facilitated encounters with incredible

career but also instilled a deep sense of belonging

mentors who guided, challenged, and expanded

and confidence in my ability to contribute

my capabilities beyond what I initially thought

meaningfully to this ever-evolving field.

possible. Participating in my first Capture the Flag

cybersecurity principles, spanning blue, red, and

The cybersecurity industry offers various certifications from different organisations.

Have you pursued, or do you plan to pursue any of these certifications? If so, which ones, and what factors influenced your choice?

purple team activities. The mentors, representing

Certifications serve as vital markers for validating

diverse domains, offered invaluable insights into the

skills, knowledge, and facilitating career progression.

roles and responsibilities within each team, helping

My approach to pursuing certifications is strategic,

to clarify my career aspirations within cybersecurity.

aimed at aligning them with my career stage and

This guidance was instrumental in shaping my

aspirations within the cybersecurity landscape.

competition within this nurturing yet challenging environment was a pivotal moment for me. It wasn’t just about the competition; it was about immersing myself in the real-world application of

understanding of the field, guiding my further studies, certifications, and home practices toward achieving

My journey began with the renowned graduate

my professional goals.

certificate in cybersecurity at UNSW, driven by its esteemed reputation in computer science and the

Moreover, the program fostered lifelong friendships.

renowned Richard Buckland’s teaching prowess. This

The support network I’ve built with these women

intensive and gratifying course provided me with a

has become a source of ongoing motivation and

solid foundation in cybersecurity principles.

encouragement, underscoring the importance of community in navigating the complexities of a career

Recently, I’ve booked my exam for the ISC2-CC

in cybersecurity.

certification, enticed by a free exam voucher offer and the opportunity to attain a certificate

The inaugural nature of the Purple Team Australia

representing foundational skill sets from a reputable

program amplified its impact on me. Being part

organisation. The ISC2-CC certification emphasises

of the first cohort in a field where women are

managerial and leadership skills, catering to

significantly underrepresented was both a privilege

individuals aspiring for roles blending technical

and a challenge. The program’s commitment to

expertise with managerial acumen.

diversity, welcoming participants from non-traditional backgrounds such as hairdressing, business, and

Additionally, I’m considering the CompTIA

nursing, like myself, was a breath of fresh air. It

Security+ certification for its global recognition and

challenged stereotypes and barriers that often

comprehensive coverage of key cybersecurity topics.

discourage women from entering or advancing in the

This certification underscores practical, hands-on

cybersecurity field.

skills across various security domains, making it invaluable for beginners seeking to demonstrate

The most invaluable takeaway from this experience

readiness for cybersecurity roles.

is the spirit of camaraderie and support that

84

permeated every aspect of the program. It left a

Specialisation is a crucial aspect of my certification

lasting impression on me, reinforcing the belief that

plan, particularly in cloud security. For those inclined

more women, more diversity, and more inclusiveness

towards AWS, the AWS Certified Solutions Architect

can only enrich the cybersecurity space. This

certification offers essential knowledge on AWS

program not only equipped me with the technical

Identity and Access Management (IAM). Similarly,

skills and knowledge to progress in my cybersecurity

focusing on Microsoft Azure would involve acquiring

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

certifications like Azure Fundamentals (AZ-900)

However, concerning the practical facets of industry

and Security Engineer Associate (AZ-500) for a

readiness, there exists a gap between academic

comprehensive understanding of Azure AD and

preparation and the expectations for cybersecurity

Azure RBAC.

graduates in the workforce. The reality is that many of the skills deemed essential for immediate

Penetration testing holds a particular interest for

effectiveness in a cybersecurity role are often

me, starting with the CompTIA Pentest+ for entry-

cultivated outside the structured curriculum of

level skills and progressing to the advanced OSCP

the university program. This includes hands-on

certification for seasoned professionals. These

experience with the latest tools, techniques, and an

certifications are pivotal in showcasing expertise in

awareness of emerging threats, all of which are in a

identifying, exploiting, and mitigating vulnerabilities.

constant state of flux.

However, it’s crucial to recognize that certifications

Therefore, while it may appear that the academic

are just one facet of the broader learning journey in

program does not entirely keep pace with the rapid

cybersecurity. Continuous learning and hands-on

changes in the cybersecurity industry, it’s crucial

practice through platforms like Hack The Box or

to acknowledge that no educational program can

Try Hack Me are indispensable for staying updated

perfectly mirror the dynamic nature of the field.

on evolving threats and technologies. Mastery in

The expectation that graduates will emerge fully

cybersecurity also demands a deep understanding

prepared for all facets of their future careers without

of cryptography, encryption, zero-trust architecture,

the need for further learning or external experience

and the nuances of symmetric and asymmetric

is unrealistic.

encryption. Furthermore, proficiency in Linux, scripting, and basic programming complements

While my program at UNSW furnishes a solid

theoretical knowledge and certifications.

theoretical foundation, the responsibility also falls on students to actively pursue additional

Ultimately, my choice of certifications is driven

opportunities to cultivate practical, industry-relevant

by a desire to establish a robust foundation in

skills. This approach ensures that graduates are

cybersecurity, specialise in areas of interest,

not only grounded in the fundamental principles

and continually develop a diverse set of skills

of cybersecurity but also adaptable and primed to

essential for navigating the complexities of the

continue learning in response to the ever-evolving

cybersecurity landscape.

threat landscape.

Given the rapid evolution of cybersecurity threats, do you feel that your academic program adequately keeps pace with the industry’s current landscape?

On one hand, UNSW provides a robust foundation in cybersecurity principles, paying closer attention with a comprehensive approach to critical thinking and problem-solving.

This foundational knowledge is essential, equipping students with the theoretical understanding necessary to navigate the intricate world of cybersecurity.

I S S U E 20

WOMEN IN SECURITY MAGAZINE

85

ISABELLE HO

Do you believe there are areas in cybersecurity that deserve more emphasis in your coursework or areas that could receive less focus?

oriented program, the increasing prevalence and

Reflecting on my coursework in cybersecurity,

bridge this gap, equipping students with a more

particularly within the comprehensive program

nuanced understanding of these threats and

offered by UNSW, I appreciate the breadth

strategies to mitigate them.

impact of such attacks on a broad population highlight the need for greater coverage. Specialised lectures or courses on social engineering could

and depth of areas covered. The degree commendably introduces students to a wide

Finding experts capable of delivering such

array of methodologies, fostering a well-rounded

specialised content may pose a challenge. However,

understanding of cybersecurity. This exposure

the effort to integrate this critical area into the

is invaluable, preparing students to navigate the

cybersecurity curriculum would significantly enhance

multifaceted landscape of cybersecurity with a solid

the preparedness of graduates to address one of the

foundation in various technical aspects.

most pervasive threats in the modern cybersecurity landscape. By fostering an understanding of the

However, one area that I believe deserves more

psychological tactics employed by social engineers,

emphasis is social engineering. The significance

students could gain valuable insights into designing

of social engineering in the cybersecurity domain

more robust security measures that account for the

cannot be overstated, as it directly targets the human

human factor, thereby better protecting against a

element, arguably the most vulnerable aspect of any

wide range of cyber threats.

security system. Social engineering exploits require a deep understanding of psychology and human behaviour, areas that are markedly distinct from the technical focus that characterises much of the current curriculum.

Have you ever encountered situations where being a woman in cybersecurity made you feel disadvantaged or discriminated against? If so, please share your experiences.

Throughout my academic journey in cybersecurity,

86

While acknowledging the challenges of incorporating

I’ve encountered situations that have shed light on

a comprehensive exploration of social engineering

the gender disparities within the field. One recurring

and its psychological underpinnings into a technically

challenge has been in university tutorials or group

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

work, where instances of mansplaining and being

challenging. The application

talked over by male students have been all too

process revealed a market inclined

common. It’s not uncommon for male peers to either

towards hiring individuals with

repeat my ideas as their own immediately after I’ve

mid to senior-level experience,

shared them or feel the need to explain concepts to

significantly limiting the availability

me as if assuming I lack understanding or capability

of entry-level roles.

based on my gender.

My attempts to secure entryInterestingly, these difficulties extended beyond

level positions have been met

interactions with male peers. A particularly ironic

with limited success. Responses

situation arose during university exams. As a

to applications have been few,

new mother needing to breastfeed my baby every

and while I have progressed

three hours, a four-hour exam posed a significant

to initial and second-round

challenge. While a male lecturer showed empathy

interviews on occasion, follow-up

and accommodated my needs, a female lecturer

communication from employers

made me navigate bureaucratic hurdles. Despite

has been lacking. The scarcity

the necessity of breastfeeding, I was compelled

of opportunities and the lack of

to apply for special consideration, a process the

feedback have been disheartening,

lecturer informed me was at their discretion.

underscoring a gap between the

Only after presenting the university’s policy

demand for cybersecurity professionals and the

on supporting breastfeeding was I reluctantly

accessibility of roles for newcomers to the field.

allowed the necessary time during the exam. This experience was not only stressful and humiliating

This experience has been a source of frustration,

but also highlighted the lack of inclusiveness and

as it contrasts sharply with the industry’s reported

consideration for women’s needs, especially those of

need for more cybersecurity professionals. It’s

mothers, within academic settings.

discouraging to find that the barrier to entry is not a lack of interest or capability on the part of aspiring

These experiences have underscored the complex

cybersecurity professionals but rather a hesitancy

layers of gender dynamics within the cybersecurity

among organisations to embrace and invest in new

field and academia. They serve as a stark reminder

talent. Despite these challenges, my eagerness to

of the progress still needed to foster an inclusive

contribute to the field remains undiminished. I am

environment that values diversity and equity. Such

convinced of my ability to make a positive impact in

challenges haven’t deterred me; instead, they’ve

cybersecurity; I am simply seeking an opportunity to

fueled my determination to excel and advocate for

demonstrate this potential.

a more inclusive and understanding cybersecurity community where the contributions of all members are respected and valued equally, regardless

www.linkedin.com/in/izzieho

of gender. www.izzieho.com

Have you actively sought employment opportunities in the cybersecurity field, and if so, what has been your experience with the application and interview process?

Yes, I’ve actively pursued employment opportunities in the cybersecurity field, and the journey has been

I S S U E 20

WOMEN IN SECURITY MAGAZINE

87

Your Success Copywriting

Lead Generation

Content Creation

Social Media

Podcasts

Data Admin Services

Telema

LET US HELP YOU AN

AN EXTENSION

CONTACT US

charlie@source2create.com.au | 0452 588 406

OR

is Our Priority Events

arketing

Speaker Acquisition

Event Management

Strategy

Website Creation

Custom Projects

ND WE WILL BECOME

OF YOUR TEAM

aby@source2create.com.au | 0415 500 580 | linkedin.com/in/abigail-swabey-95145312

field of cybersecurity through employment or internships?

Beyond my academic pursuits, I’ve engaged in activities that directly benefit me: KAYLA MCLOUGHLIN

• I’ve dedicated significant time to “Homelabbing,” creating environments to explore concepts that

Kayla McLoughlin, originally hailing from the UK, relocated during her early childhood and currently resides in Sydney, Australia.

She recently completed her Bachelor of Cybersecurity at Macquarie University and now serves as a Junior Incident Responder at Pepsico.

Bachelor of Cybersecurity Graduate at Macquarie University

pique my interest, whether it’s experimenting with new vulnerable web apps or analysing malware.

• I interned with EY’s offensive security team, where I had the privilege of working for and learning from some incredibly knowledgeable and kind individuals who imparted a lot of technical and industry knowledge during my short time there.

• Teaching opportunities provided by my university have been invaluable in solidifying my understanding of various subjects. It has been immensely fulfilling to share my knowledge and

Now that you have graduated, which specific cybersecurity role do you aspire to and what motivates your choice?

expertise with fellow students.

branch of it that I did not find intriguing. I chose

Given the rapid evolution of cybersecurity threats, do you feel that your academic program adequately keeps pace with the industry’s current landscape?

to pursue the DFIR (Digital Forensics and Incident

I believe there’s a significant gap in exposure to

Response) path because I felt that it was not as

certain aspects of cybersecurity that are prevalent

prominently covered in university curricula and other

in the industry. For instance, in past course

learning environments.

offerings, I noticed a lack of attention given to

Having enjoyed diverse experiences within the realm of cybersecurity, I have yet to encounter a

Blue team-oriented units. An example of this is my

When you decided to pursue a career in cybersecurity, how did your parents, peers, or career advisors react? Did you encounter any opposition, and if so, how did you navigate those challenges?

only academic encounter with a SIEM (Security Information and Event Management) system in university occurred during a CTF (Capture The Flag) event everything else came through my own self-studies.

My loved ones’ reaction to my career choice

90

was primarily one of surprise. Given that I never

Another area of concern is the limited exposure

completed high school for various reasons, many

to Cloud environments within my academic

had perhaps resigned to the notion of my potential

program. Without additional study, students

going unfulfilled. However, as they witnessed me

may find it challenging to grasp the security

laying down the foundational blocks of my life and

considerations associated with the cloud, such as

excelling in my studies, their confidence and support

Identity and Access Management (IAM) and multi-

gradually grew.

tenanted environments.

Beyond your academic studies, what practical experience have you gained in the

What aspect of your cybersecurity studies excites you the most, and why?

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

My most cherished aspect of my studies was the

Additionally, I’ve been involved in organising women

environment fostered by my university’s computing

in security initiatives within my university. These

department. Here, I had the privilege of constant

initiatives aim to create an inclusive environment

access to individuals more knowledgeable in

where women feel empowered to participate in

cybersecurity than myself. Whether it was lecturers

Capture The Flag (CTF) events. I’m pleased to say

engaging students in two-hour discussions about

that these efforts were met with resounding success

niche security topics at our tables or industry

in achieving their goals last year.

professionals delivering enlightening guest talks, it was the human connections that truly enriched my educational experience.

What is your preferred source for staying informed about cybersecurity trends and general information?

Considering the holistic requirements of a future role, do you see the need for additional training in non-cyber skills, such as interpersonal communication or management? If yes, why?

I’m an avid user of Twitter and various online

Without a doubt, I attribute much of my success in

pieces of information that have accumulated

this field to what are commonly referred to as “soft

over time, greatly enriching my understanding

skills.” I often joke with friends that my greatest

of cybersecurity.

forums. Accounts like vx-underground have been an invaluable source of knowledge for me. Additionally, participating in Discord communities has provided me with access to a wealth of small but significant

superpower in this industry is my knack for striking

I firmly believe that the ability to effectively

Have you ever encountered situations where being a woman in cybersecurity made you feel disadvantaged or discriminated against? If so, please share your experiences.

communicate complex information to individuals

Since transitioning, I’ve noticed a

lacking the same knowledge base is crucial. Whether

shift in how my opinions

up conversations with anyone, be it colleagues or strangers. It’s a skill I believe is vastly undervalued.

it’s educating end users or briefing the C-suite, these skills play a significant role in mitigating the human element of risk.

Are you actively engaged in the broader cybersecurity community? If so, what has been your involvement, and how has it enriched your experience?

I’m a regular attendee at Sectalks Sydney, and I make an effort to attend several other conventions each year, including 0xCC, Bsides Canberra, and Hacksyd, among others. Attending these events has been incredibly valuable to me in my cybersecurity journey. I’ve had the privilege of meeting outstanding and highly talented women at these cons, many of whom I still engage with regularly and admire to this day.

I S S U E 20

WOMEN IN SECURITY MAGAZINE

91

KAYLA MCLOUGHLIN on security topics are perceived and trusted. There was a particular instance during a group discussion on a security topic when someone posed a question, and I offered my response, only to have another individual dismiss my input as incorrect. I took it in stride, understanding that we all make mistakes, and I anticipated them to provide counterpoints. However, instead of presenting original arguments, they essentially echoed my initial response as if it were their own idea.

Following that conversation, a colleague approached me to validate my experience and assure me that I wasn’t imagining things. This phenomenon isn’t unique to me; I’ve observed it happening to numerous women I’m acquainted with. Nowadays, I make a conscious effort to speak up when I witness similar situations occurring to others, advocating for fair treatment and recognition of diverse perspectives.

Have you actively sought employment opportunities in the cybersecurity field, and if so, what has been your experience with the application and interview process?

Yes, indeed, I’ve had some success with job applications and interviews, and I believe it’s a combination of luck and skill. Luck plays a role in finding opportunities that align with your strengths and interests, while skill comes into play through practising interview techniques.

In my experience, the key to successful interviews is authenticity. Letting your passion shine through and genuinely being yourself can make a significant difference. Additionally, taking the time to get to know the individuals interviewing you by showing sincere interest in them can leave a positive impression. It’s about creating a memorable and positive interaction that goes beyond just answering questions.

www.linkedin.com/in/kay-mcloughlin

92

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

studying it, how does the reality of your experiences today compare?

When I embarked on my Bachelor of IT degree, I was uncertain about which specific area of the vast IT industry I wanted to pursue. However, I was certain ANUSHKA RAVALJI

about my passion for working with people and my desire for a client-centric role that involved helping

Anushka Ravalji is currently in her final year at Macquarie University, Sydney, Australia, pursuing a double degree in Bachelor of Information Technology with a major in Cybersecurity and Bachelor of Commerce with a major in Accounting.

Final year Commerce and Information Technology student with majors in Accounting and Cybersecurity respectively

others. Additionally, my curiosity about emerging technology trends and my penchant for investigative work led me to seek a career path that would satisfy these interests.

What surprised me the most about cybersecurity was the breadth of roles available and the diverse range of skills I could develop and utilise within this field. From learning programming languages to conducting digital footprint autopsies and providing clients with advice to enhance their security posture, cybersecurity has provided me with opportunities to

In a casual conversation with someone unfamiliar with the field, how do you articulate the excitement and potential of a career in cybersecurity, aiming to spark their interest?

continuously learn and grow while making a tangible impact in the field.

the demand for cybersecurity professionals

When you decided to pursue a career in cybersecurity, how did your parents, peers, or career advisors react? Did you encounter any opposition, and if so, how did you navigate those challenges?

extends across various industries and geographical

Coming from a family background rooted in the

boundaries. This widespread reliance on technology

financial services industry, the realm of IT seemed

ensures that cybersecurity expertise is valued

unfamiliar compared to my parents’ expertise. Opting

globally, offering professionals the chance to work in

for a double degree in IT and Commerce with a major

a multitude of companies and countries.

in Accounting stemmed from my mother’s influence,

A career in cybersecurity is characterised by its dynamic nature and diverse opportunities. With technology permeating every aspect of our lives,

who is a Chartered Accountant. I reasoned that if the Cybersecurity roles encompass a broad spectrum,

IT field didn’t align with my expectations, I could pivot

ranging from incident response to consulting and

towards accounting.

risk advisory. Each role requires a unique set of skills, ensuring that there is a position suited for individuals

Despite the contrast between my parents’ careers

with varying talents and interests. Whether you

and mine, they remained supportive throughout my

possess a knack for dismantling and assembling

academic and career journey. Their guidance was

computer hardware or enjoy the investigative aspects

invaluable in helping me navigate the IT landscape,

of cybersecurity, there is a niche waiting for you in

leveraging my strengths while integrating my

this ever-evolving field.

accounting knowledge and broader business acumen into my professional pursuits. Their unwavering

Reflecting on your initial perceptions of cybersecurity when you first considered

I S S U E 20

support and tailored advice have been instrumental in shaping my career path in IT.

WOMEN IN SECURITY MAGAZINE

93

ANUSHKA RAVALJI

Beyond your academic studies, what practical experience have you gained in the field of cybersecurity through employment or internships?

program adequately keeps pace with the industry’’s current landscape?

I believe learning is never ending and my university studies have prepared me for the current threat

I had the opportunity to participate in the Australian

landscape, however, given the rate at which things

Defence Force’s Cyber Gap Program cohort of 2023,

change in cybersecurity, I believe it is up to me to

where I completed an internship. During this program,

stay aware, upskill and adapt as need be. I think

I gained practical skills in incident response and

my overall understanding of cybercrime, the digital

familiarised myself with regulatory frameworks such

landscape and security will give me a good starting

as NIST and ASD Essential 8. The learning experience

point for my career however the rest of the learning

was enriched through a structured module system

will definitely occur on the job.

and engaging Capture the Flag (CTF) exercises.

Additionally, I had the privilege of attending a week-

What aspect of your cybersecurity studies excites you the most, and why?

long conference in Canberra, where I immersed

One of the most rewarding aspects of studying

myself in seminars covering various topical

cybersecurity and working in the field is the rapid

issues related to Australia’s cybersecurity defence

pace of change and the tangible impact our efforts

strategies. These sessions, facilitated by industry

can have on clients and the broader Australian

experts, provided valuable insights into the roles and

community. We’ve witnessed firsthand the

responsibilities within the Australian Public Sector

devastating consequences of cyber breaches on

cybersecurity landscape.

critical infrastructure and the privacy of individuals.

However, by promoting better cyber hygiene among

During the summer holidays, I embarked on an

employees and customers, regularly assessing

internship program at Deloitte, specifically within

company security posture, and implementing

the Risk Advisory pillar in the Cloud Security team.

comprehensive protection measures, we can

This experience allowed me to refine my technical

significantly enhance data security.

expertise in assessing client security posture and offering actionable solutions. Working in a large

Being able to contribute to sensitive situations

multinational consulting firm provided me with

where customer data may have been compromised

a comprehensive understanding of the diverse

is particularly fulfilling. In such instances, I find

cybersecurity roles available and how to translate

satisfaction in assisting clients in safeguarding

my cybersecurity studies into practical applications

their digital assets or guiding them through

within a professional environment.

challenging circumstances. The opportunity to make a meaningful difference in protecting valuable data

Given the rapid evolution of cybersecurity threats, do you feel that your academic

underscores the importance and fulfilment of roles within cybersecurity.

Considering the holistic requirements of a future role, do you see the need for additional training in non-cyber skills, such as interpersonal communication or management?

If yes, why?

The concepts of “technical skills” and “soft skills” are ubiquitous across industries, emphasising the importance of developing a well-rounded skill set.

94

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

striking a balance between these two skill sets. While

changes to your career trajectory? If yes, what adjustments would you consider?

technical expertise is crucial, it is complemented

I firmly believe that everything happens for a reason.

by soft skills such as effective communication,

However, if I were to express a wish, it would be to

collaboration, emotional intelligence, and

have explored my career options at an earlier age.

conflict resolution.

Initially, I hadn’t considered a career in IT during my

In my experience, success in any role hinges on

high school years. Had I been more open-minded and Mastering soft skills enables individuals to

looked beyond the paths others were taking, I might

thrive in team environments, fostering seamless

have developed my technical IT skills sooner.

communication and cooperation with colleagues.

Additionally, possessing emotional intelligence

Looking back, I take pride in my adaptability,

allows for the effective management of

particularly when I transitioned to university without

stakeholders and the resolution of conflicts in

the familiar presence of my high school friends.

the workplace. By nurturing these essential skills,

Despite this challenge, I was able to forge strong

individuals can enhance their ability to excel in

connections and find a sense of belonging within the

their roles and contribute meaningfully to their

university community. Leading the Women Entering

organisations’ success.

Business (WEB) society as its President has been a particularly rewarding experience for me. Overall,

Have you ever encountered situations where being a woman in cybersecurity made you feel disadvantaged or discriminated against?

I am content with the way my journey has unfolded.

I believe that overcoming obstacles has enriched my journey, making it both rewarding and enjoyable.

I believe workplaces across various industries have made significant progress in creating environments where women feel safe and respected. While IT,

www.linkedin.com/in/anushka-ravalji-456714220

particularly cybersecurity, remains predominantly male-dominated, there are many women achieving remarkable successes in their roles with the support of their male colleagues. However, I’ve observed instances where women may inadvertently foster a sense of competition among themselves, which can hinder their collective growth. Rather than uplifting each other, there may be a tendency to inadvertently impede one another’s progress.

I firmly believe that regardless of gender, we can all collaborate to support each other’s career advancement. By fostering a culture of mutual support and encouragement, we can achieve better outcomes for everyone involved. It’s essential to recognize that success knows no gender, and by working together, we can create an inclusive and empowering environment for all individuals to thrive.

Reflecting on your journey thus far, would you, with the benefit of hindsight, make any

I S S U E 20

WOMEN IN SECURITY MAGAZINE

95

The allure of cybersecurity lies not only in its role as a defender against malicious actors but also in its empowerment of individuals to assert control over their digital identities. Equipping oneself with the requisite knowledge enables confident navigation EMAN ELSHIMY

through the digital realm while sidestepping potential cyber threats.

Bachelor of Computer Science student majoring in Cybersecurity at the University of Wollongong, Australia. Originally from Giza, Egypt, embarked on a journey that led her to the Kingdom of Saudi Arabia during her early years and eventually to Australia, where she currently resides in Wollongong, New South Wales. Now in her final year, gaining practical experience in the field as a Cybersecurity Consultant intern at GuardWare.

For those drawn to new challenges and opportunities, cybersecurity presents an ever-evolving field. The perpetual emergence of novel cyber threats ensures constant evolution, offering a plethora of roles to explore and master. Whether one’s interests lie in ethical hacking, cryptography, or cyber risk management, there exists a niche awaiting exploration and expertise.

UOW Computer Science Student majoring in Cybersecurity

Reflecting on your initial perceptions of cybersecurity when you first considered studying it, how does the reality of your experiences today compare?

In a casual conversation with someone unfamiliar with the field, how do you articulate the excitement and potential of a career in cybersecurity, aiming to spark their interest?

When I embarked on my university journey,

Cybersecurity encompasses the vital task of

with cybersecurity nowhere in sight. It wasn’t until I

safeguarding both software and hardware devices

began exploring other potential areas of study that I

against a myriad of threats. It serves as the shield

stumbled upon the dynamic realm of cybersecurity.

that thwarts hackers from pilfering your online

I’ll admit, initially, I was uncertain about its relevance

data during activities such as browsing, making

in the job market. However, as I delved deeper into

transactions, or engaging in online conversations.

the curriculum, the breadth and intricacy of the field

Behind the scenes, dedicated security professionals

captivated me, and I knew it was where I envisioned

diligently monitor for potential breaches, striving to

myself in the future.

cybersecurity was not even on my radar. I found myself torn between various degree options, contemplating paths from medicine to engineering,

keep your information secure from cybercriminals.

In the second year of my degree, I had the Despite the pervasive nature of online activities,

opportunity to delve into various subjects, from

some individuals downplay the necessity of

cryptography and network security to delving into the

implementing robust security measures, believing

principles of ethical hacking and artificial intelligence.

themselves immune to cyber threats. Yet, in today’s

Each course expanded my understanding of new

interconnected digital landscape, cyberattacks

facets within the field, sparking fresh insights and

are escalating globally. Consequently, grasping

fueling my curiosity and passion further.

the fundamental tenets of cybersecurity and adopting protective measures as individuals has

Looking back on my journey, I am astonished by the

become paramount.

transformation in my perception of cybersecurity.

It has evolved beyond being just a degree; it now

96

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

represents an opportunity for me to showcase

cybersecurity practices and fostering a culture where

my dedication and make a tangible impact. As I

digital safety is paramount.

continue to progress in my cybersecurity journey, I am constantly reminded of my growth. What began

Through interactions during the cyber checks,

as a simple curiosity has blossomed into a profound

I gained a newfound appreciation for the vital

passion driving both my academic and professional

role cybersecurity professionals play. Beyond

endeavours. With each challenge encountered

safeguarding business networks, they serve as

and every milestone achieved, my commitment

guardians of personal data and privacy, reinforcing

to cybersecurity deepens, fueled by the myriad of

the critical importance of their expertise in preserving

exciting opportunities it holds for the future.

digital security for individuals and organisations alike.

Beyond your academic studies, what practical experience have you gained in the field of cybersecurity through employment or internships?

My journey into professional cybersecurity began

The cybersecurity industry offers various certifications from different organisations.

Have you pursued, or do you plan to pursue any of these certifications? If so, which ones, and what factors influenced your choice?

as a Cyber Cadet for the SXSW event in 2023, an

The cybersecurity industry presents a wealth of

exhilarating opportunity facilitated by GuardWare

educational opportunities, and I have actively

in collaboration with Investment NSW. Tasked

pursued numerous courses and certifications to

with conducting cyber checks, my role involved

enhance my knowledge and expertise in the field.

administering questionnaire-based interviews aimed at assessing individuals’ digital safety.

One such endeavour involved participation in courses offered on LinkedIn, including the SMB Implementing

The questions ranged from the intricacy of password

the NIST Cybersecurity Framework. This course not

management to the practice of utilising separate

only delved into governance, risk, and compliance

email accounts for distinct online activities, such as

(GRC) practices but also provided practical

social media and banking, and the importance of

strategies for implementing the NIST framework,

regular data backups. The objective was to evaluate

ensuring robust security for small to medium-

participants’ vulnerability to data loss and cyber

sized businesses.

threats, emphasising the significance of proactive digital security measures.

Engaging with diverse perspectives during these assessments was enlightening. Some participants demonstrated acute awareness of potential online risks and expressed eagerness to enhance their digital asset protection strategies. Conversely, others appeared less informed or concerned about their digital vulnerabilities.

This experience proved invaluable, not only for honing my practical cybersecurity skills but also for deepening my appreciation of its significance in today’s interconnected world. It underscored the imperative of educating individuals about optimal

I S S U E 20

WOMEN IN SECURITY MAGAZINE

97

EMAN ELSHIMY Additionally, courses like Building and Managing a

malicious actors exploit them. The essence of ethical

Cybersecurity Program, CompTIA Security SY0601

hacking lies not only in resolving incidents but also in

Cert Prep 1 Threats Attacks and Vulnerabilities, and

preventing them altogether.

Becoming a Cybersecurity Professional (learning path) have broadened my understanding of various

As an ethical hacker, the pursuit of strengthening

topics within cybersecurity. I meticulously noted

current security measures is a continuous journey.

key insights from these courses, conducting further

It entails pushing the boundaries to fortify defences

research to deepen my comprehension of their

against potential cyber threats. What excites me

significance in the cybersecurity landscape.

most is the thrill of unravelling new vulnerabilities and witnessing the resilience of systems fortified

I also found value in Cisco’s offerings, such as the

with robust security measures, making penetration

Cyber Threat Management course, which elucidated

increasingly difficult.

the diverse threats individuals and organisations may encounter and how to mitigate them effectively.

In the realm of cybersecurity, there exists a wealth

The Introduction to Cybersecurity course by Cisco,

of captivating topics, from ethical hacking to

which I undertook during my first year of study,

cryptography to network security, each offering

provided foundational knowledge that bolstered my

opportunities for exploration and understanding.

confidence in the field.

Every day presents a new opportunity for learning and growth. As I progress in my cybersecurity

By acquiring these certifications and completing

journey, I eagerly anticipate delving deeper into these

these courses, I have honed my ability to navigate the

topics and leveraging my skills to tackle real-world

cybersecurity terrain with confidence and expertise.

challenges in the cyber landscape.

Furthermore, these credentials serve as tangible evidence of my commitment to continuous learning and readiness to tackle complex cybersecurity challenges for prospective employers.

Looking ahead, I aim to pursue additional

Considering the holistic requirements of a future role, do you see the need for additional training in non-cyber skills, such as interpersonal communication or management?

If yes, why?

professional certifications, such as the Certified Information Systems Security Professional (CISSP), post-graduation. This certification will validate my proficiency in IT security and my capacity to develop and oversee comprehensive cybersecurity programs.

Currently, I am diligently preparing for the exam, eager to leverage this credential to further enhance my standing in the cybersecurity field and advance my career prospects.

What aspect of your cybersecurity studies excites you the most, and why?

Among the myriad aspects of cybersecurity, ethical hacking holds a special allure for me. This field revolves around adopting the mindset of a hacker to proactively uncover vulnerabilities within organisational systems and networks before

98

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

Certainly, proficiency in non-technical skills is

digital identity has grown significantly. It’s become

increasingly essential across various job titles within

evident that online protection extends far beyond

cybersecurity, including project managers, security

merely setting strong passwords; it requires vigilance

analysts, and other IT professionals.

at every juncture.

In today’s job landscape, technical expertise alone

One of the key steps I’ve taken is to enhance

often falls short of meeting the demands of roles

the security of my passwords, ensuring they’re

within cybersecurity. Instead, employers prioritise

both robust and unique for each account. This

candidates’ abilities to lead teams effectively and

precautionary measure ensures that even if one

communicate adeptly with others.

account is compromised, the others remain secure.

Though it demands some effort, the peace of mind

Interpersonal communication skills, for instance,

it affords is invaluable. Additionally, I’ve established

play a pivotal role in fostering collaboration and

a routine of regularly updating all software and

addressing security concerns within organisations.

antivirus programs and implementing multi-factor

Security analysts, in particular, rely on strong

authentication. This added layer of security offers

communication abilities to collaborate closely with

reassurance, knowing that access requires more

teams and address evolving security challenges.

than just a password.

On the other hand, management skills are

Navigating the realm of social media has revealed

indispensable for team leaders and project

both its benefits and risks. While it serves as a

managers, who oversee task assignments, resource

valuable tool for connectivity, it can also pose

scheduling, and project alignment with goals.

significant threats to personal security. Hence, I’ve

Effective management ensures projects progress

taken steps to carefully manage my privacy settings,

according to plan, contributing to overall success.

ensuring that only trusted individuals have access to my shared content. Moreover, staying vigilant against

These non-cyber skills contribute significantly to

common online scams, ranging from suspicious

shaping the organisational environment, fostering

emails to deceptive messages or calls, is imperative.

trust, collaboration, and innovation. A well-crafted

Being able to discern fraudulent attempts and

project plan, coupled with adept management

protect personal information is essential in today’s

and communication, forms a robust strategy for

digital landscape.

success. When combined, these skills cultivate an environment conducive to successful projects and

Overall, adopting a proactive stance towards

positive team dynamics.

cybersecurity has been empowering. With each precautionary measure I implement, I gain

I firmly believe that investing in training for non-cyber

confidence and reassurance in my online interactions

abilities such as management and interpersonal

and the security of my digital identity.

communication is imperative, given the multifaceted requirements and job dynamics of many cybersecurity roles.

What measures do you have in place to enhance your personal cybersecurity in today’s digital landscape?

Reflecting on your journey thus far, would you, with the benefit of hindsight, make any changes to your career trajectory? If yes, what adjustments would you consider?

Reflecting on my career journey, I can’t help but ponder if there are aspects I would approach

As I’ve delved deeper into the realm of cybersecurity,

differently armed with hindsight. One significant

my awareness of the importance of safeguarding my

adjustment I would make is initiating my foray into

I S S U E 20

WOMEN IN SECURITY MAGAZINE

99

EMAN ELSHIMY cybersecurity sooner. It wasn’t until my second year of university that I truly immersed myself in the field, and looking back, I recognize the advantage of an earlier start. Beginning earlier would have provided me with a stronger foundation and allowed me to grasp the intricacies of cybersecurity sooner.

Moreover, I regret not seizing more opportunities for hands-on programs and internships in cybersecurity.

Engaging in such experiences could have accelerated my skill development, provided insights from seasoned professionals, and offered practical exposure to real-world challenges. Additionally, it could have aided me in identifying specific areas within cybersecurity that resonate most with my passions and strengths. While I’m still in the process of discovery, I remain optimistic about finding my niche in due time.

Moving forward, I am dedicated to prioritising continuous learning and professional growth in cybersecurity. This entails attending conferences, obtaining certifications, and nurturing connections within the cybersecurity community. While there may be aspects I would alter if given the chance to revisit the past, I am grateful for the experiences thus far and enthusiastic about the prospects that lie ahead in my cybersecurity career.

www.linkedin.com/in/eman-elshimy-4a5266200

100

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

Future Leaders

Join Us in Empowering ! d e t n a W y it r u c e S in Students Are you a student passionate about shaping the future of security?

Do you have innovative ideas and insights to share with a global audience? Join us in contributing to the Women in Security Magazine and become a voice for the next generation of security leaders!

Why contribute?

Gain valuable exposure: Reach over 5000 subscribers globally and showcase your expertise to industry professionals.

How to get involved

Make an impact: Share your experiences, challenges, and aspirations to inspire others and shape the future of security.

Let us know you are interested.

We will send you a series of questions of which you can choose which ones you would like to answer.

Submit those back to us in an email.

We will then edit to be a concise and flowing edited Q&A.

Don't miss this opportunity to be part of a vibrant community of students driving change in the security industry.

Contact us today to learn more about how you can contribute to the Women in Security Magazine!

Contact: jane@source2create.com.au

compelling illustrations of the dynamic nature of our field. Narrating stories about various hacks and how experts tackle them adds an extra layer of intrigue to the conversation, showcasing the constant challenges and innovations within cybersecurity.

JESSICA SYLVIA CLEMENT Jessica Sylvia Clement is currently enrolled in the second semester of the MSc Cyber Security program at Royal Melbourne Institute of Technology (RMIT). Additionally, she holds a position as an intern at HEX20 Global, specialising in researching cyber aspects within satellite-based systems.

M.Sc Cyber Security Student at RMIT

Reflecting on your initial perceptions of cybersecurity when you first considered studying it, how does the reality of your experiences today compare?

I earned my bachelor’s degree in forensic science, but the practical components of the course were disrupted by the onset of COVID. Online learning left me feeling somewhat incomplete, except for the digital forensics portion, which ignited my interest in cybersecurity. I had begun exploring cybersecurity as a hobby during my undergraduate studies, and my fascination with the subject drove me to pursue it

In a casual conversation with someone unfamiliar with the field, how do you articulate the excitement and potential of a career in cybersecurity, aiming to spark their interest?

further in my master’s degree.

I always find it exciting to delve into discussions

once thought of as a relatively narrow field focused

about my field. Our current era is undeniably defined

solely on websites and personal devices has revealed

by its digital saturation, with technology pervading

itself to be a much broader landscape. Currently, I am

every aspect of our lives. In such a landscape, where

employed by a satellite and space-based company,

digital data is abundant, the potential for hacking and

where I’ve come to understand the expansive scope

misuse looms large. This is where my role becomes

of cybersecurity beyond traditional notions of

both crucial and thrilling. Just think about it – being

online safety. It encompasses complex areas such

a guardian of the online realm, where one’s skills

as satellite systems, highlighting the remarkable

are constantly in demand, and where we play an

evolution of my understanding of the field. It’s been

essential role in safeguarding the digital sphere for

eye-opening to realise the vastness and intricacy that

individuals and organisations alike.

cybersecurity truly encompasses.

I often like to start conversations by painting this of what we do. For instance, I might say something

Upon graduation, which specific cybersecurity role do you aspire to secure employment in, and what motivates your choice?

along the lines of, “Isn’t it incredible to be at the

As I toss my graduation cap into the air, I’m poised

forefront of securing the digital world, where our

to dive headlong into the electrifying realm of Cyber

expertise is vital for maintaining its integrity?”

Forensics. Imagine this: delving into the intricate

picture, emphasising the excitement and importance

The experiences I’ve gained since then have been vastly different from my initial perceptions. What I

minds of cyber criminals, untangling the threads of

102

I also enjoy sharing concrete examples, particularly

their digital mischief, and uncovering the essence

those related to smishing, given its widespread

of their motives. It’s akin to being a cyber detective,

occurrence. These anecdotes not only highlight the

dissecting the who, what, and why lurking behind the

prevalence of cybersecurity threats but also serve as

digital curtain.

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

at understanding the criminal psyche. I’m also

so far, and how has it impacted your career aspirations?

passionate about shaking up the status quo with risk

It all started with my fascination for digital forensics

analysis and staying ahead of emerging threats. It’s

during my bachelor’s, where I eagerly dove into the

akin to embodying the spirit of Sherlock Holmes in

world of uncovering deleted data by dissecting hard

the cyber domain—deciphering patterns and ensuring

disks. This passion led me to explore online courses

a safer digital frontier for all.

on cybersecurity, and in that journey, I stumbled

But here’s the twist: my ambition doesn’t stop

upon my ultimate favourite YouTuber, NetworkChuck, This is the kind of adventure that sets my pulse

whose videos became a profound source of

racing, and I’m eagerly poised to embark upon it!

inspiration. Spending countless hours absorbing and practising the techniques he demonstrated,

When you decided to pursue a career in cybersecurity, how did your parents, peers, or career advisors react? Did you encounter any opposition, and if so, how did you navigate those challenges?

I eventually set up my first virtual box and began

Despite the unwavering support of my parents and

influenced by other YouTube personalities such

those around me, I wrestled with my own doubts

as John Hammond and David Bombal, whose

when it came to pursuing a career in cybersecurity.

insights and tutorials added further depth to my

Making the leap into a technical field without any

learning. As I gained hands-on experience through

prior background in technology felt like a formidable

internships, I proactively connected with supportive

hurdle. I often found myself questioning whether my

individuals on LinkedIn, joined vibrant Discord

sheer interest and passionate drive were enough, or if

groups, and absorbed invaluable guidance from the

I needed to measure up to the brilliant minds already

cybersecurity community.

honing my skills by chasing flags on platforms like TryHackMe and Hack The Box. The journey didn’t stop there. I found myself

established in the field.

Social media played an instrumental role in my To conquer these internal uncertainties, I made a

growth until I took a significant leap forward by

conscious effort to trust in my intentions, embracing

pursuing a master’s degree in cybersecurity. Since

the magnitude of the challenge and pushing beyond

then, my journey has only intensified, thanks to the

my own perceived limitations. Having my family as

unwavering support and teachings from remarkable

a steadfast support system played a crucial role in

mentors at RMIT. Additionally, the guidance from

navigating through these uncertainties, providing the

HEX20’s CEO, Mr. Lloyd, has significantly fueled my

foundation I needed to forge ahead.

career aspirations, propelling me toward new heights in the cybersecurity field.

Who or what has been the most influential factor in shaping your journey in cybersecurity

Recount the most memorable or significant event in your cybersecurity journey to date, highlighting why it left a lasting impression.

A standout moment in my cybersecurity journey remains vivid in my memory: the undertaking of a project centered on risk analysis and business continuity planning. The pinnacle of this experience was presenting the project to Mr. Munashe Kandawasvika, the Manager of Security Governance, Risk, and Compliance at UniSuper. The sense of

I S S U E 20

WOMEN IN SECURITY MAGAZINE

103

JESSICA SYLVIA CLEMENT accomplishment as I shared my risk analysis and

capacities, I actively champion the next generation’s

plan was amplified by his positive feedback and

pursuit of careers in cybersecurity, offering

appreciation. This encounter significantly bolstered

glimpses into the myriad opportunities within this

my confidence, affirming my capabilities to thrive in

dynamic field.

the field.

with newfound confidence, I eagerly anticipate future

The cybersecurity industry offers various certifications from different organisations.

Have you pursued, or do you plan to pursue any of these certifications? If so, which ones, and what factors influenced your choice?

research endeavours, confident that they too will

In terms of certifications, I am currently strategizing

yield success.

to pursue the CND, CEH, and CHFI certifications

While this event may seem modest in the broader scope of my cybersecurity journey, it stands as a pivotal moment that ignites my passion. Now, armed

offered by EC-Council. This decision stems from

Beyond your academic studies, what practical experience have you gained in the field of cybersecurity through employment or internships?

both their recognized value in the industry and

In addition to my academic pursuits, I’ve garnered

keep my skills sharp in the rapidly evolving field

significant practical experience in cybersecurity

of cybersecurity.

recommendations from seasoned professionals I’ve connected with on LinkedIn. I see these certifications not just as a challenge but as crucial tools to

through diverse internships. These roles have afforded me the opportunity to immerse myself

Furthermore, the prevalence of these certifications

in ethical hacking, particularly in uncovering

as prerequisites in cybersecurity job descriptions

vulnerabilities within real-world websites and

significantly influences my choice. Many employers

software. Actively documenting and reporting these

prioritize candidates with these credentials, making

findings has equipped me with invaluable hands-on

them integral to my career trajectory. However, I’m

experience in the operational facets of cybersecurity.

mindful to pursue only those certifications that directly align with my job requirements, ensuring that

Moreover, I’ve contributed to projects spanning

each adds tangible value to my skill set.

cryptography and risk management, thereby expanding my expertise in these pivotal domains.

A standout engagement involved volunteering with the cyber police department in Kerala, India, further enriching my practical knowledge.

Given the rapid evolution of cybersecurity threats, do you feel that your academic program adequately keeps pace with the industry’s current landscape?

I am confident in the well-crafted program structure,

Presently, I am interning with HEX20, a satellite-

which seamlessly aligns with prevailing cybersecurity

focused company, where my research centers on

trends and threats. Our professors, who are industry

identifying vulnerabilities and fortifying security

stalwarts, impart a curriculum that blends theory

protocols for both ground and space-based satellite

with hands-on experience, keeping us at the forefront

systems. This role has provided me with profound

of the ever-changing cyber landscape.

insights into the intricacies of safeguarding satellite technology.

Furthermore, the program fosters active participation in hackathons, facilitates interaction with industry

104

Beyond my direct involvement in cybersecurity, I

experts, and encourages contributions to research

proudly serve as a Women in STEM Ambassador

projects that directly influence the evolving

and a Cybersecurity Ambassador at RMIT. In these

cybersecurity ecosystem. This holistic approach

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

As I delve into diverse case studies throughout my

Are there specific aspects of your cybersecurity studies that you find particularly challenging? If so, what are they, and how do you approach overcoming these challenges?

studies, I’ve come to grasp the ease with which

Certainly. Transitioning from

individuals, organisations, and even entire nations

a non-technical and non-

can be targeted and potentially harmed from the

mathematics background

comfort of one’s home. This realisation is both

into cybersecurity studies has

daunting and exhilarating. I’m particularly drawn

presented me with numerous

to deciphering the criminal mindset and find great

challenges. Notably, I’ve observed

satisfaction in the challenge and excitement of

that I dedicate more time to

staying one step ahead of evolving techniques to

assignments and studies compared to my peers with

outsmart malicious actors.

technical backgrounds, some of whom possess prior

ensures that we are not only well-equipped with knowledge but also actively engaged in shaping the future of cybersecurity.

What aspect of your cybersecurity studies excites you the most, and why?

industry experience. Particularly in problem-solving Moreover, I find the realms of programming,

and ethical hacking challenges, I often encounter

cryptography, and networking to be deeply

obstacles that leave me feeling stuck and unable to

intriguing subjects that further fuel my passion

find solutions.

for understanding and navigating the complexities of cybersecurity.

To overcome these hurdles, I actively seek assistance from peers or tutors when faced with difficulties. I

Conversely, which aspect of your studies do you find least interesting or useful, and how do you navigate through it?

adopt a meticulous approach, meticulously noting

While I’ve found the subjects themselves consistently

a mindset of continuous learning, I recognize

engaging and beneficial, the transition in teaching

that making mistakes is an inherent aspect of the

methods towards self-learning via videos and

learning process. I derive lessons from each misstep,

uploaded materials hasn’t been as impactful for

persisting until I achieve success. With a determined

me compared to previous approaches. To navigate

attitude, I refuse to give up on challenging tasks in

through this challenge, I’ve incorporated interactivity

my studies, consistently pushing myself to overcome

into my study routine.

obstacles and conquer new heights.

Instead of solely relying on passive consumption of

and viewpoints. Additionally, I develop practical

Do you believe there are areas in cybersecurity that deserve more emphasis in your coursework or areas that could receive less focus?

projects or scenarios relevant to the subject matter,

Indeed, I believe there’s room for enhancing the

transforming theoretical knowledge into tangible

practical aspect of my cybersecurity coursework.

hands-on experience. By adopting this approach, I

Introducing more hands-on experiences and real-

aim to maximize the benefits of self-learning while

world simulations would offer a more immersive

effectively addressing the limitations I perceive in the

learning journey, enabling students to directly apply

current teaching methodology.

theoretical concepts to tangible scenarios.

content, I actively engage in discussions with peers and online communities to expand my understanding

I S S U E 20

down the mistakes I make and strategizing on how to address them moving forward. Embracing

WOMEN IN SECURITY MAGAZINE

105

JESSICA SYLVIA CLEMENT However, I also suggest a slight adjustment in the

atmosphere has truly enriched my cybersecurity

emphasis placed on cryptography, specifically in

voyage, making it both fulfilling and inspiring.

the intricate details of cryptographic protocols.

the complexities of cryptographic algorithms

What is your preferred source for staying informed about cybersecurity trends and general information?

can sometimes feel overwhelming. I propose a

I must admit, my quest for cyber-related information

balanced approach that efficiently allocates time

leads me to frequent searches on browsing

across various cybersecurity domains, potentially

platforms like Google and Microsoft, resulting in

reducing the depth of focus on certain aspects of

tailored and automatic news that perfectly aligns

cryptography. This adjustment could contribute to a

with my interests. Furthermore, I glean valuable

more well-rounded and engaging learning experience

insights from articles on “Medium” and stay abreast

for students.

of the latest developments by following “The Hacker

While I recognize the significance of cryptography in information security, delving excessively into

News.” To optimise my time, I tune into cybercrime

Considering the holistic requirements of a future role, do you see the need for additional training in non-cyber skills, such as interpersonal communication or management?

If yes, why?

podcasts during my commute to work, absorbing

Beyond mastering technical skills, it’s crucial

of cybersecurity.

information in an engaging auditory format.

This multi-channel approach ensures I receive a diverse range of perspectives and remain wellinformed about the constantly evolving landscape

to polish interpersonal communication and

cybersecurity professional, not just tech-savvy, but

Have you ever encountered situations where being a woman in cybersecurity made you feel disadvantaged or discriminated against? If so, please share your experiences.

also a strong communicator and adept manager –

Thankfully, in my personal journey, I haven’t

ready to navigate the ever-changing cyber landscape

encountered situations where being a woman in

with confidence and finesse.

cybersecurity has made me feel disadvantaged

management abilities. These non-cyber skills enhance collaboration and ensure effective cybersecurity initiatives. Picture a well-rounded

or discriminated against. I attribute this largely

Are you actively engaged in the broader cybersecurity community? If so, what has been your involvement, and how has it enriched your experience?

to the supportive community of fellow women professionals in the industry, which has been invaluable in providing encouragement and solidarity.

Besides my engagement in forums, webinars, and

106

online discussions within dynamic cybersecurity

However, I do recognize the gender

communities, I am honoured to hold the position of

disparity within my class, where

cybersecurity ambassador at RMIT. In this capacity,

women make up only 25 percent

my main responsibility is to promote awareness and

compared to the majority of

inspire others to pursue careers in cybersecurity. It’s

men. This underscores the

not merely about imparting knowledge but also about

urgent need to encourage and

absorbing valuable insights from fellow community

empower more women to enter

members. This dual role has not only enabled me

the field. Viewing this as an opportunity,

to contribute to the expansion of the cybersecurity

I actively engage with women, girls, and

community but has also deepened my personal

school children, aiming to inspire and

learning journey. The supportive and collaborative

encourage them to consider careers in

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

S T U D E N T

I N

S E C U R I T Y

S P O T L I G H T

cybersecurity. I firmly believe that fostering inclusivity

However, I acknowledge that every learning

is crucial for the growth and diversity of the field.

experience, regardless of timing, contributes to personal and professional growth. Recognizing the

What measures do you have in place to enhance your personal cybersecurity in today’s digital landscape?

importance of adaptability and self-correction in any career, I am committed to continuous learning and improvement in the dynamic realm of cybersecurity.

To enhance my personal cybersecurity in today’s

I prioritise regularly updating all my devices and

Have you actively sought employment opportunities in the cybersecurity field, and if so, what has been your experience with the application and interview process?

applications to ensure I have the latest security

Yes, I have actively pursued employment

patches installed.

opportunities within the cybersecurity field. Although

I rely on a password manager to generate

I have yet to apply for full-time positions, I intend to

and manage strong, unique passwords for

do so in the near future. In terms of internships, I

each of my accounts, minimising the risk of

have been fortunate enough to secure opportunities

unauthorised access.

with several companies.

digital landscape, I’ve implemented several key measures: 1.

2.

3.

4.

5.

Whenever possible, I enable two-factor authentication to add an extra layer of security

One notable observation is the scarcity of casual

to my accounts.

or part-time positions within this field, which

I remain vigilant against phishing threats by

is understandable given its complexity. As a

carefully scrutinising email links and avoiding

result, I have opted to wait until completing my

clicking on suspicious attachments.

master’s program before exploring full-time

I’ve invested in reputable antivirus and

employment opportunities.

anti-malware software to provide real-time 6.

protection against potential threats.

When it comes to job applications and interviews,

Lastly, I stay informed about the latest

I often encounter specific qualifications that I may

cybersecurity trends and best practices through

not always possess. However, I make a concerted

online forums and reputable sources, allowing

effort to research every term mentioned in the job

me to remain proactive in adapting to the ever-

criteria and thoroughly understand the company and

evolving digital landscape.

its requirements before applying. Personalization is paramount to me; I dedicate time to tailor my resume

Reflecting on your journey thus far, would you, with the benefit of hindsight, make any changes to your career trajectory? If yes, what adjustments would you consider?

for each company, striving to elicit positive feedback.

Reflecting on my journey, if I had been aware of the

for an interview. I diligently practise and review

cybersecurity path earlier, I might have opted for a

my concepts beforehand to ensure that I am well-

related field during my bachelor’s degree. Looking

prepared to articulate my skills and knowledge during

back, I also see the value in pursuing specialised

the interview process.

Furthermore, when preparing for interviews, I meticulously research industry leaders if I am called

certifications earlier in my career to deepen my skills and knowledge in cybersecurity. This could have potentially provided a more focused trajectory

www.linkedin.com/in/jessica-sylvia-clement/

for my professional development in this rapidly evolving field.

I S S U E 20

WOMEN IN SECURITY MAGAZINE

107

LISA ROTHFIELD-KIRSCHNER Director at Private Wealth Network | Impactful Education & Peer Experiences for Family Office

Olivia and Jack on how to manage ‘sharenting’ Twins Olivia and Jack love adventures and holidays, especially ones that involve being active! They particularly love holidaying with their cousins who are of similar ages. They always have a great deal of fun with lots of laughter and games. But there was one thing that bothered them when catching up with their cousins: their aunt and uncle were always ‘sharenting’: sharing too much private information about their children on social media.

And so, Olivia and Jack had helped their family understand the importance of privacy in a world that is always connected. They all learnt that some things are meant to be shared only through the heart, not on the internet.

Olivia and Jack noticed their cousins felt embarrassed and uncomfortable when their pictures and stories were posted online for everyone to see. The cousins were even teased at school about how much their parents shared about their lives. Olivia and Jack decided it was time for their parents to talk with their aunt and uncle ahead of the upcoming family holiday.

1. Start the conversation about posting on social media early, and keep talking about it. Have an open conversation with your entire family about the importance of privacy and the potential risks of oversharing. This includes cousins, grandparents and caregivers.

Olivia and Jack spoke with their parents, saying, “We can’t wait to go on our family holiday with our cousins, but we’re also worried about how much aunt Emma and uncle Steve post online. Last year they posted heaps of photos of our holiday that none of us wanted. Now, many of our friends know exactly what we did on holiday. We prefer to share our own stories and photos with the people we choose.”

Olivia explained: “We also know sharenting can be dangerous. It’s like leaving the front door wide open for strangers.” Jack added. “And it can affect us kids too! It’s about our privacy and the things we might not want the whole world to know.”

Olivia’s and Jack’s parents spoke to aunt Emma and uncle Steve at a family dinner and both listened very carefully. They hadn’t realised the impact of their actions and how much it embarrassed all the children. They promised to think before they shared and to respect their children’s privacy.

OLIVIA AND JACK’S TOP FIVE TIPS TO DEAL WITH SHARENTING

2. Set boundaries that fit your family values. Decide together what is okay to share and what should stay private.

3. Respect each other’s wishes. Always ask for permission before sharing someone’s photo or story, especially if it involves children. Many schools and sporting organisations have guidelines about posting photos of other people’s children that include a requirement to ask for permission beforehand.

4. Educate each other. Learn about the privacy settings on social media platforms and use them to control who sees your posts.

5. Create a private group. If you want to share moments with family and friends, consider creating a private group where you can control membership. www.linkedin.com/in/lisarothfield-kirschner

howwegotcybersmart.com

The family holiday arrived, and it was a blast!

The phones were not out at every moment, there was a lot of laughter and special memories made together. Olivia’s and Jack’s cousins felt happier, knowing their moments were private and special.

108

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

How We Got Cyber Smart addresses cyber safety, cyber bullying and online safety for elementary school-aged children.

Lisa has partnered with Cool.Org, and her content is found on the Department of Education website.

READ NOW

WOMEN IN SECURITY MAGAZINE CONTRIBUTORS 01

02

1. NARELLE DEVINE

Telstra CISO for Asia Pacific

2. AMANDA-JANE TURNER

03

04

Author of the Demystifying Cybercrime series and Women in Tech books. Conference Speaker and Cybercrime specialist

3. ELIZABETH OMOTAYO

Web Specialist (networks and security)

4. DANIELLA KAFOURIS

Partner at Deloitte specialising in Transformation, Data, and Cyber

05

06

5. ANITA MODI

Cyber Risk Advisor at Advaya Cybersecurity Consulting

6. ELLIE BLACKMAN

Security Analyst at Culture Amp

07

08

7. MADHURI NANDI

Head of Security at Till Payments | Board Member, AWSN | Creator of ITSA (IT Security Awareness Framework)

8. JENNIFER FUNK

Manager II Cyber Defence & Ops US at Ahold Delhaize

09

10

9. ANKITA SINGH

Cyber Security Sales & Marketing at Cochlear

10. YAAMINI BARATHI MOHAN

Product Security at Dell

11. OLUWATOSIN (TOSIN) FATOKUN

11

12

Senior Security Governance and Strategy Officer at Paystack

12. NONYE ANYANWU

IT GRC Specialist

13. CRAIG FORD

13

14

Head Unicorn – Cofounder and Executive Director, Cyber Unicorns.

Australian Best Selling Author of A Hacker I Am, Foresight and The Shadow World book series. vCISO – Hungry Jacks, Wesley Mission, PCYC and Baidam Solutions

14. BELINDA NOEL

Chief Growth Officer at Secolve

15

16

15. JO STEWART-RATTRAY

Oceania Ambassador, ISACA

16. SUSAN MCGINTY

CEO Aya Leadership

110

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

17

18

17. LISA VENTURA

Founder, Cyber Security Unity

18. MATT DUNHAM

Director at Decipher Bureau (Cyber Security Recruitment)

19

20

19. MARINA AZAR TOAILOA

Security Operations

20. KAREN STEPHENS

CEO and co-founder of BCyber

21

22

21. DR. RIFAT ARA SHAMS

Postdoctoral Fellow, Data61, Australia’s National Science Agency (CSIRO)

22. MEGHAN JACQUOT

Security Engineer, Inspectiv

23

24

23. SOPHIE BUCHANAN

Macquarie University IT Student

24. ISABELLE HO

Purple Team Australia Graduate and Graduate Certificate in Cyber Security at UNSW

25

26

25. KAYLA MCLOUGHLIN

Bachelor of Cybersecurity Graduate at Macquarie University

26. ANUSHKA RAVALJI

Final year Commerce and Information Technology student with majors in Accounting and Cybersecurity respectively

27. EMAN ELSHIMY

27

28

UOW Computer Science Student majoring in Cybersecurity

28. JESSICA SYLVIA CLEMENT

M.Sc Cyber Security Student at RMIT

29. LISA ROTHFIELD-KIRSCHNER

Author of How We Got Cyber Smart | Amazon Bestseller

29

I S S U E 20

WOMEN IN SECURITY MAGAZINE

111

THE LEARNING HUB

THE COMPLETE CYBER SECURITY COURSE: HACKERS EXPOSED! An advanced practical skillset in defeating all online threats - advanced hackers, trackers, malware and all Internet nastiness including mitigating government spying and mass surveillance.

VISIT HERE

Learn in-demand skills to launch a new career in Cybersecurity with our immersive bootcamp.

VISIT HERE

GOOGLE CYBERSECURITY PROFESSIONAL CERTIFICATE This is your path to a career in cybersecurity. In this certificate program, you’ll learn in-demand skills that can have you job-ready in less than 6 months. No degree or experience required.

VISIT HERE

TRYHACKME

FUTURELEARN

CYBRARY

TryHackMe is a browser-based cyber security training platform, with learning content covering all skill levels from the complete beginner to the seasoned hacker.

Learn from world-renowned industry experts such as Microsoft, CloudSwyft and Cisco, and start building a roster of skills that’ll catapult you into the next generation of tech leaders.

To assess the strength of your organization’s cybersecurity posture, you need to gather information, perform scanning and enumeration, and show how an adversary could hack into your systems.

VISIT HERE

112

CYBERSECURITY BOOTCAMP ONLINE

W O M E N I N S E C U R I T Y M A G A Z I N E

VISIT HERE

VISIT HERE

M AY • J U N E 2024

FEATURING FREE SECURITY TRAINING RESOURCES THAT ARE AIMED AT INCREASING SECURITY AWARENESS AND HELPING PEOPLE BUILD AND UPSKILL THEIR SECURITY SKILLS.

CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY (CISA) Sophisticated cyber actors and nation-states exploit vulnerabilities to steal information and money and are developing capabilities to disrupt, destroy, or threaten the delivery of essential services

VISIT HERE

CYBERSECURITY BOOTCAMP No matter your experience level in tech, the Cybersecurity Bootcamp at Fullstack Academy will work with your unique educational and career goals. Fullstack Academy Cyber grads are prepared for a variety of cybersecurity roles.

VISIT HERE

HACK THE BOX It’s a platform where you can develop cybersecurity skills for your IT team. It’s a platform where you can get hacking experience from beginner to expert level.

Education institutions also make use of content you can find on this platform to help their students close the gap between theory and practical

VISIT HERE

OPEN SECURITY TRAINING This is an open platform where you can find materials for your cybersecurity training which are freely available under open-source licenses. Every instructor can use this material and can update it and a new instructor can pick up where a previous one left off.

VISIT HERE

I S S U E 20

WOMEN IN SECURITY MAGAZINE

113

THE LEARNING HUB

BUGCROWD UNIVERSITY Bugcrowd is designed to innovate and secure the reputation of every business and protect its customers against cyberattacks. It is one of the largest companies specializing in bug bounty programs and vulnerability disclosure.

MANAGING RISK IN THE INFORMATION AGE It has become imperative for every organization to become aware of all risks inherent in the evolving cyber landscape. This course provides a comprehensive understanding of how to identify and mitigate vulnerabilities within an organization’s networks, systems, and data.

VISIT HERE

VISIT HERE

CYBER ACES ONLINE

FEDERAL VIRTUAL TRAINING ENVIRONMENT

This course is geared toward a prospective cybersecurity professional or members of the general public. The SANS Institute hopes that by offering courses like this for free, people will be better educated on cybersecurity, and it will ultimately “help strengthen the security of our nation.”

VISIT HERE

114

CYBERSECURITY:

W O M E N I N S E C U R I T Y M A G A Z I N E

STATIONX Unlimited access to hundreds of cybersecurity courses including ethical hacking, penetration testing, and much more.

Beginner-friendly and great value for money.

VISIT HERE

PENTESTER ACADEMY

The Federal Virtual Training Environment (FedVTE) is a valuable resource center for US Government staff who need cybersecurity training. It contains over 500 hours of cybersecurity training in different domains.

This is a platform where you can find comprehensive, handson, and technically challenging cybersecurity courses online.

It also contains fundamentals courses that a beginner can take and gradually move to more advanced courses.

VISIT HERE

VISIT HERE

M AY • J U N E 2024

Want to get matched with Lead Gen experts but dont know where to start?

Our solution experts can help you find the right supplier, Looking to streamline your B2B lead generation process?

Want to use multiple suppliers but dont have time to coordinate?

Need a consistent stream of leads coming into the sales team?

Looking to tap into new markets?

Need end-to-end lead nurture programs?

LET US HELP YOU OVERCOME YOUR LEAD GEN CHALLENGES REACH OUT TODAY FOR AN INSTANT QUOTE. The team at Source2Create has all the necessary skills to get the job done for you, so your time can be reserved to focus on other things.

With:

aby@source2create.com.au charlie@source2create.com.au source2create.com.au

TURN IT UP

A DOG CALLED DIVERSITY With Lisa Mulligan Welcome to A Dog Called diversity.

A podcast exploring the themes of diversity, equity and inclusion through sharing stories of personal and powerful lived experiences.

Diversity and Inclusion Leader Lisa Mulligan, speaks with fascinating people and uncovers unique experiences with the purpose of building a more inclusive, accepting and kind world.

With Kai and Simeon We’re a podcast and consultancy created to foster Diverse Representation, Equity, and Belonging in Creative Industries.

Our mission is to take a critical look at current issues marginalized groups experience as employees and consumers, then provide actionable solutions.

EY STRONG WHEN WE BELONG With Mona Bitar The EY Strong When We Belong podcast series explores how diversity, equity, and inclusion (DE&I) can create a better and more inclusive workplace, drawing on individuals' stories and lived experiences. The series includes EY people and guests from UK businesses, charities, and boards.

CLICK TO LISTEN

CLICK TO LISTEN

CLICK TO LISTEN

SENTIMENTAL GARBAGE: JUSTICE FOR DUMB WOMEN

CHAMPIONING GENDER DIVERSITY IN THE CYBER SECURITY INDUSTRY

THE POWER OF MIND OVER MATTER

With Caroline O'Donoghue Irish presenter Caroline O'Donoghue’s podcast offers an impassioned defence of femaletargeted and made culture that’s typically dismissed as lightweight by both society at large and those charged with marketing it.

CLICK TO LISTEN 116

MIXED COMPANY

W O M E N I N S E C U R I T Y M A G A Z I N E

With Women Speak Cyber Gender diversity in the cyber security industry isn’t a new problem; but it still remains a relatively unaddressed problem, which only further aids the vicious cycle that is inequality.

CLICK TO LISTEN

With Jessica Hyde A DFIR expert shares her journey from retail management to the Marines to a successful career in forensics.

CLICK TO LISTEN M AY • J U N E 2024

COME THROUGH

AND NOTHING LESS

INCHARGE

With Rebecca Carroll

With Rosario Dawson and Retta

With Diane von Furstenberg

Writer, podcast host, producer, and editor Rebecca Carroll’s new podcast focuses on how race is inextricably linked to issues such as healthcare, jobs, climate change, and the media.

Hosted by Rosario Dawson and comedian Retta, And Nothing Less is a new podcast honoring the centennial anniversary of women’s right to vote.

InCharge with DVF is Diane von Furstenberg’s newly-launched debut podcast series. Expect candid interviews with inspiring women (Elaine Welteroth, Priyanka Chopra-Jonas, and Karlie Kloss are part of the impressive lineup) that focus on the trials and tribulations of their accomplished lives and career.

CLICK TO LISTEN

SUGAR CALLING With Cheryl Strayed Strayed will be lighting up these perilous times as she calls up some of the world’s most prolific writers (such as Margaret Atwood and Judy Blume) for wisdom, insight, and inspiration.

CLICK TO LISTEN I S S U E 20

CLICK TO LISTEN

STRAIGHTEN YOUR CROWN With Andrea Minkow and Amy Jin From examining female founders’ often inhibiting need to be liked, to explaining how to fundraise in a time of financial crisis, each episode tells you everything you need to know about “starting, scaling, and raising money for a business.”

CLICK TO LISTEN

CLICK TO LISTEN

OKAY, NOW LISTEN With Scottie Beam and Sylvia Obell If episode two’s interview with Nadia Hallgren (director of the Michelle Obama-documentary Becoming) is any indication of what’s to come, this new podcast is definitely worthy of your time.

CLICK TO LISTEN WOMEN IN SECURITY MAGAZINE

117

TURN IT UP

LIVING CORPORATE

LADY DON'T TAKE NO

TRUTH BE TOLD

With Amy C

With Alicia Garza

With Tonya Mosley

Living Corporate centers and amplifies Black and brown voices at work through facilitating authentic dialogues with executives, entrepreneurs, activists, authors. influencers, elected officials and more.

Lady Don’t Take No is a podcast created by Alicia Garza for people who like their political commentary with a side of beauty recommendations.

The Emmy award-winning radio journalist explores what it means to live and thrive as a person of color in our society. It offers guidance on “how you can be you in a world that doesn’t always want you to be,” and tackles some of the most pressing issues people of color face, making it an educational must-listen for all.

CLICK TO LISTEN

118

W O M E N I N S E C U R I T Y M A G A Z I N E

CLICK TO LISTEN

CLICK TO LISTEN

M AY • J U N E 2024

J O B B OA R D CLASSIFIED CYBER SECURITY - LEVEL 2 | LOCKHEED MARTIN FULL TIME

TEXAS

At Lockheed Martin Aeronautics, we're taking innovation to the next level. From designing the most advanced air vehicle to designing aircraft that defies gravity, our engineers live on the cutting edge of technology. But we are not just invested in aircraft; we are also invested in people. We know that our success is a combined effort, and we therefore strive to provide opportunities for employees to learn, grow, and thrive. Never have the opportunities for a technical career been so limitless.

SENIOR CYBERSECURITY ENGINEER | GENERAL DYNAMICS MISSION SYSTEMS FULL TIME

PITTSBURGH, PA

Experience with applying NIST Risk Management Framework. Experience with specific RMF overlays Strong knowledge of cyber security technology and trends Recognizes and incorporates various security designs and lessons learned. Effective in communicating issues, impacts, and corrective actions as they affect the cyber design and implementation.

APPLY HERE

APPLY HERE CYBER SECURITY ANALYST | CAPGEMINI FULL TIME

ENGLAND

This is a critical role covering the Cyber Security of the client digital estate. Incumbents will be required to carry out Incident Response to analyse and manage cyber security events in defence of the clients core network. They will be responsible for ensuring clients networks and systems are maintained and monitored from a security perspective.

APPLY HERE

SENIOR ENGINEER | CANONICAL FULL TIME

DUBAI

Canonical delivers open source to the world across every class of compute. Canonical Ubuntu is the world's favourite Linux for cloud, desktop and IoT. Our engineering teams work on operating systems, programming languages, applications, devices, infrastructure and services.

We work in Golang, Python, C, C++, and Rust for system services, and use React and Flutter on the front end.

APPLY HERE

I S S U E 20

SENIOR INTELLIGENCE ANALYST | GOOGLE FULL TIME

DUBAI

Bachelor's degree or equivalent practical experience.Candidates will typically have 7 years of experience in an investigative role involved in the production of threat intelligence for decisionmakers/customers and involved in direct customer support. Experience in an operational role involved in the research and writing of threat intelligence products for decision-makers/customers.

APPLY HERE

FUSE THREAT INTELLIGENCE LEAD - USDS | TIKTOK FULL TIME

WASHINGTON, DC

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. U.S. Data Security (“USDS”) is a subsidiary of TikTok in the U.S. This new, security-first division was created to bring heightened focus and governance to our data protection policies and content assurance protocols to keep U.S. users safe.

APPLY HERE

WOMEN IN SECURITY MAGAZINE

119

J O B B OA R D ENGINEERING CYBERSECURITY MANAGER | PLUXEE FULL TIME

FRANCE

Pluxee is a Global Leader in Employee Benefits and Rewards services present in 31 countries.

Our Vision is to “bring to life a personalized employee experience at work and beyond”. We have embarked on a significant digital transformation and growth program resulting in growing online presence and digital services. Consequently, the Security of our digital solutions has become a key focus for our activities.

APPLY HERE

CYBER SECURITY SPECIALIST | MIGGO SECURITY FULL TIME

ISRAEL

This is a full-time on-site role for a Cyber Security Specialist at Miggo Security. The Cyber Security Specialist will be responsible for conducting application security assessments, implementing cybersecurity measures, monitoring network security, and ensuring overall information security.

The role will require collaboration with crossfunctional teams to identify potential vulnerabilities and develop strategies to mitigate risks.

APPLY HERE IT SECURITY ANALYST | ICE FULL TIME

INDIA

Primary role of IT Security Analyst II performing application administration and Active Directory. User provisioning and De-provisioning. User life-cycle management, performing certifications, Access Reviews and terminations, etc., Knowledge on group policies and types of accounts. Knowledge on Identity Access Management governance and provisioning tools like SailPoint, Active Directory and Service Now.

AI SOLUTIONS CYBERSECURITY ARCHITECT | SCHNEIDER ELECTRIC FULL TIME

FRANCE

At Schneider Electric, we are undergoing a transformative journey by leveraging Artificial Intelligence & Automation technologies to empower users with Machine Learning and Cognitive computing, driving business value.Simultaneously, as the number of cybersecurity threats continues to grow, we recognize the importance of having a comprehensive cybersecurity approach across our solutions to safeguard our business and customers.

APPLY HERE

SECURITY RESEARCHER | VWV GROUP SA FULL TIME

ISRAEL

As a Security Researcher, your primary focus will be on creating and researching anomaly and behavioral based threat models, dissecting attack techniques, and leading proactive threat hunting endeavors across a spectrum of domains, including cloud infrastructures (with a specialized emphasis on Office 365 and Azure), network security, proxies, firewalls, DNS, Active Directory, Azure Active Directory, and SharePoint, and product security.

APPLY HERE SECURITY ARCHITECT | ONE NEW ZEALAND FULL TIME

NEW ZEALAND

One New Zealand are looking for two Security Architects to join our team! As a Security Architect you will take ownership of defining and implementing cross-domain security architectures, drive solution design and governance, and enhance cyber maturity across the organization.

APPLY HERE

APPLY HERE

120

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

SECURITY OPERATIONS ANALYST | WSP FULL TIME

NEW ZEALAND

As the premier design, engineering, and environmental consultancy in Aotearoa New Zealand, WSP exists to future-proof our cities and environment. Our 2,500 expert professionals in 35 offices across Aotearoa are united by the common purpose of creating positive, longlasting impacts on the communities we serve.

APPLY HERE CLOUD SECURITY RESEARCHER | VWV GROUP SA FULL TIME

ISRAEL

At Varonis, we see the world of cybersecurity differently. Instead of chasing threats, we believe that the most practical approach is to protect data from the inside out. We’ve building the industry’s first fully autonomous data security platform to help our customers dramatically reduce risk with minimal human effort.

APPLY HERE

SECURITY ANALYST (PHYSICAL SECURITY) | ASOS FULL TIME

ENGLAND

You’ll be supporting our Physical Security Department, in the protection of our ASOSers, our properties and our assets. You’ll support both office and field-based teams, ensuring we minimise risk and reduce loss across our offices and supply chain.

APPLY HERE

CYBER SECURITY MANAGER | HR WAYS - HIRING TECH TALENT FULL TIME

PAKISTAN

The Cyber Security Senior Manager will play a critical role in safeguarding our company's digital assets, customer data, and information systems.

This position demands a highly skilled and experienced professional capable of developing and implementing advanced cybersecurity strategies and managing security initiatives.

APPLY HERE

DO YOU WANT YOUR COMPANY'S JOB LISTED IN THE NEXT ISSUE? Contact us today to find out how we can boost your job listing and help you find the top talent in the security industry.

REACH OUT

aby@source2create.com.au

I S S U E 20

WOMEN IN SECURITY MAGAZINE

121

OFF THE SHELF

DARING GREATLY Author // Brene Brown It is not the critic who counts; not the man who points out how the strong man stumbles, or where the doer of deeds could have done them better. The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood; who strives valiantly.

BUY THE BOOK

I KNOW WHY THE CAGED BIRD SINGS Author // Maya Angelou Here is a book as joyous and painful, as mysterious and memorable, as childhood itself. I Know Why the Caged Bird Sings captures the longing of lonely children, the brute insult of bigotry, and the wonder of words that can make the world right. Maya Angelou's debut memoir is a modern American classic beloved worldwide.

BUY THE BOOK

A ROOM OF ONE'S OWN Author // Virginia Woolf A Room of One's Own is an extended essay by Virginia Woolf. First published on 24 October 1929, the essay was based on a series of lectures she delivered at Newnham College and Girton College.

BUY THE BOOK

RESET: MY FIGHT FOR INCLUSION AND LASTING CHANGE Author // Ellen Pao In 2015, Ellen K. Pao sued a powerhouse Silicon Valley venture capital firm, calling out workplace discrimination and retaliation against women and other underrepresented groups. Her suit rocked the tech world—and exposed its toxic culture and its homogeneity.

BUY THE BOOK

122

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

BROTOPIA: BREAKING UP THE BOYS' CLUB OF SILICON VALLEY Author // Emily Chang This book elucidates how the bro culture of Silicon Valley evolved, recounts firsthand experiences of women subjected to biases, and provides insights on how to instigate positive changes in the industry.

BUY THE BOOK

BELONGING: THE KEY TO TRANSFORMING AND MAINTAINING DIVERSITY, INCLUSION AND EQUALITY AT WORK Authors // Kathryn Jacob, Sue Unerman and Mark Edwards One in four US workers feels they do not belong at work. Structural racism, the patriarchy of the boardroom, pay disparities are just a few of the obstacles in our workplaces that systematically alienate and repress employees of color, women, LGBTQ workers, and employees with disabilities.

BUY THE BOOK

POWER UP: HOW SMART WOMEN WIN IN THE NEW ECONOMY Author // Magdalena Yesil "Power Up" is a testament to the resilience, ambition, and prowess of women in the digital age. Magdalena Yesil, a pioneering Silicon Valley investor, shares her insights and offers a roadmap for women to thrive in the evolving economic landscape.

BUY THE BOOK

PIVOT: THE ONLY MOVE THAT MATTERS IS YOUR NEXT ONE Author // Jenny Blake "Pivot" addresses the essential art of reinventing oneself in an ever-evolving professional landscape. Drawing on her experiences, Jenny Blake presents a methodical approach to navigating and thriving during significant career transitions.

BUY THE BOOK

I S S U E 20

WOMEN IN SECURITY MAGAZINE

123

OFF THE SHELF

WILD Author //Cheryl Strayed A powerful, blazingly honest memoir: the story of an eleven-hundred-mile solo hike that broke down a young woman reeling from catastrophe–and built her back up again.

BUY THE BOOK

THE FUTURE Author // Naomi Alderman The electric new novel from the Women’s Prize-winning, bestselling author of The Power.

BUY THE BOOK

GIRLBOSS Author // Sophia Amoruso #GIRLBOSS proves that being successful isn't about where you went to college or how popular you were in high school. It's about trusting your instincts and following your gut; knowing which rules to follow and which to break; when to button up and when to let your freak flag fly.

BUY THE BOOK

WE SHOULD ALL BE FEMINISTS Author // Chimamanda Ngozi Adichie In this personal, eloquently-argued essay--adapted from the much-admired TEDx talk of the same name--Chimamanda Ngozi Adichie offers readers a unique definition of feminism for the twenty-first century.

BUY THE BOOK

124

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

LEAN OUT: THE STRUGGLE FOR GENDER EQUALITY IN TECH AND START-UP CULTURE Author // Elissa Shevinsky Lean Out offers a counter-narrative to mainstream tech discourse, diving deep into the intricacies of gender inequality. Shevinsky collates voices from the trenches, painting an unfiltered picture of tech's culture.

BUY THE BOOK

A LEADER'S GUIDE TO CYBERSECURITY: WHY BOARDS NEED TO LEAD–AND HOW TO DO IT Authors // Thomas J. Parenty and Jack J. Domet Cybersecurity threats are on the rise. As a leader, you need to be prepared to keep your organization safe.

Companies are investing an unprecedented amount of money to keep their data and assets safe, yet cyberattacks are on the rise--and the problem is worsening. No amount of technology, resources, or policies will reverse this trend. Only sound governance, originating with the board, can turn the tide.

BUY THE BOOK

WATER SECURITY IN THE MIDDLE EAST: ESSAYS IN SCIENTIFIC AND SOCIAL COOPERATION Author // Jean Axelrad Cahan The contributors argue that while conflicts over transboundary water systems in the Middle East do occur, they tend not to be violent nor have they ever been the primary cause of a war in this region. The authors place water disputes in larger political, historical and scientific contexts and discuss how the humanities and social sciences could contribute more towards this understanding.

BUY THE BOOK

ENGENDERING HUMAN SECURITY: FEMINIST PERSPECTIVES Editors // Amrita Chhachhi, Thanh-Dam Truong, Saskia Wieringa This book presents a variety of feminist perspectives on human security under globalisation. Looking at gender as a multifaceted power domain, and human security as a policy framework, it explores the configuration of the state, power/knowledge systems and the implications for people living with deprivation and social exclusion.

BUY THE BOOK

I S S U E 20

WOMEN IN SECURITY MAGAZINE

125

OFF THE SHELF

WE ARE THE RAINBOW! THE COLOURS OF PRIDE Author // Claire Winslow What does the rainbow mean to you? Learn the meanings behind the colours of the pride flag! Shaped pages reveal each colour of the rainbow as you read, in this sweet book about love, diversity, and self-esteem that is accessible to the youngest readers.

BUY THE BOOK

SEE WHAT I CAN DO: AN INTRODUCTION TO DIFFERENCES Author // Jon Roberts In this gently-told but immensely informative new diverse and inclusive picture book Jon Roberts tells the stories of a number of children with a variety of disabilities inspired by the real-life experiences of his daughter, Kya who is on the autistic spectrum, and some of her friends.

BUY THE BOOK

WANDA Authors // Sihle Nontshokweni and Mathabo Tlali A beautiful story about self-image, culture and confidence. Wanda is a young South African girl who struggles with how her classmates treat her because of her hair.

Her mother tells her that her hair is beautiful but her schoolteacher makes her tie it up ‘neat and clean’. Discover how Wanda builds her confidence with the help of her supportive family.

BUY THE BOOK

THE PROUDEST BLUE Author // Ibtihaj Muhammad It’s the first day of school and it’s Asiya’s first day wearing her beautiful blue hijab – a headscarf worn by Muslim women. Unfortunately, some of the children are cruel and it’s a challenging day for Asiya, but she finds the strength to overcome. This story has a great message about dealing with intolerance and having pride in who you are.

BUY THE BOOK

JULIAN IS A MERMAID Author // Jessica Love Julian's imagination goes wild after he sees three fabulously dressed women on the subway. He can’t wait to try looking fabulous and sparkly just like a mermaid. But what will his grandmother say about it? This book is beautifully illustrated and pulls you into Julian’s story and the world around him. It's a way to open up the subject of gender norms and challenging expectations and a delightful read from start to finish.

BUY THE BOOK 126

W O M E N I N S E C U R I T Y M A G A Z I N E

M AY • J U N E 2024

MAJOR AND MYNAH Author // Karen Owen Join the SPUD team – the Super Perceptive Undercover Detectives ­– with Callie and her best friend Grace. They need to solve the mystery of the missing items, but Callie also needs to get used to her new hearing aids that make everything so much louder! Callie soon discovers that the hearing aids also give her the special ability to communicate with Bo the bird.

BUY THE BOOK

GIRLS WHO CODE: LEARN TO CODE AND CHANGE THE WORLD Author // Reshma Saujani Girls Who Code provides an invigorating entryway for young girls into coding. Reshma Saujani emphasizes the importance of closing the gender gap in technology and encourages girls to harness the power of coding to make a difference.

BUY THE BOOK

BIASED: UNCOVERING THE HIDDEN PREJUDICE THAT SHAPES WHAT WE SEE, THINK, AND DO Author // Jennifer L. Eberhardt How do we talk about bias? How do we address racial disparities and inequities? What role do our institutions play in creating, maintaining, and magnifying those inequities?

What role do we play? With a perspective that is at once scientific, investigative, and informed by personal experience, Dr. Jennifer Eberhardt offers us the language and courage we need to face one of the biggest and most troubling issues of our time. She exposes racial bias at all levels of society—in our neighborhoods, schools, workplaces, and criminal justice system.

BUY THE BOOK

PEACE AND SECURITY: IMPLICATIONS FOR WOMEN Authors // Porter Elisabeth & Mundku What is being done in conflict-affected countries to advance women's participation in peace processes and decision-making? In Peace and Security- Implications for women the authors combine a broad overview with specific local knowledge to examine the implementation of UN Security Council Resolution 1325, 'Women, Peace and Security.

BUY THE BOOK

I S S U E 20

WOMEN IN SECURITY MAGAZINE

127

SAVE THE DATE

2024

10 OCT 2024

2024

WOMEN IN SECURITY AWARDS womeninsecurityawards.com.au www.womeninsecurityawards.co.nz

NEW ZEALAND WOMEN IN SECURITY AWARDS

SAVE THE DATE

7 NOV 2024