• Phil Venables

Coding Skills and Security

I've increasingly found, with respect to coding, security has come full circle. Those of us who started in the 80's/90's had to code (or stitch together) stuff because for most of what you needed to do you couldn't buy it or download it. This was everything from firewalls, crypto, authentication, authorization, logging, rudimentary IDS, even in some cases some pretty neat home grown malware defenses. Pretty much all you could buy initially was access control, host security (crypto) modules and anti-virus.

Now, coding skills are needed again to partner more closely with development teams, to stitch together tools, configure systems ("policy as code"), and adapt or contribute to the myriad of fine open source projects. This shouldn't diminish the huge diversity of roles and skills that need to exist in the modern risk team [cyber or not]: risk analysis, analytics, modeling, design, communication, education and sales. Yes, those also need some coding expertise but not core to the role.

Bottom line : IMHO coding skills / experience are important, and we've definitely come full circle for security engineers - but in the past decades the field has diversified such that even more skills / roles beyond coding are also needed.

389 views0 comments

Recent Posts

See All

Situational Drivers of Cyber-Risk

Many years ago I wrote down a list of the drivers that create information / cyber-risk or that otherwise compel the need to mitigate this risk. They all, perhaps unsurprisingly, remain consistent. I d

Privilege Management Program - Governance

I can’t recall having seen an overview of a systematized privilege management program. There are lots of great articles on specific authorization management techniques and guidance for identity/access

Security Ratings: Love, Loathe or Live With Them?

Security ratings services tend to be loved or loathed. Loved if you consume them and it makes your job easier, especially if you have no other method of assessing the security of organizations that yo

Subscribe for updates.

© 2020 Philip Venables.