SEC504: Hacker Tools, Techniques, and Incident Handling

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usConnect, learn, and share with other cybersecurity professionals
Engage, challenge, and network with fellow CISOs in this exclusive community of security leaders
Become a member for instant access to our free resources.
Sign UpMission-focused cybersecurity training for government, defense, and education
Explore industry-specific programming and customized training solutions
Sponsor a SANS event or research paper
We're here to help.
Contact UsThe acronym BIPOC refers to Black, Indigenous, & People of Color, and is used to be more broadly representative than simply saying “people of color."
It would be impossible to distill the wisdom and the good vibes from the SANS BIPOC in Cybersecurity Forum. Fortunately, I don’t have to, because you can watch all seven sessions here. (You’ll need to register for the now-past event to access the webcast archive, but registration is quick and free.)
By the way, if you’re still learning about inclusion and racial justice issues, like most of us, the acronym BIPOC refers to Black, Indigenous, and People of Color, and is used to be more broadly representative than simply saying “people of color.”
SANS is proud to support the #SharetheMicinCyber campaign, created by Camille Stewart @CamilleESQ and Lauren Zabierek @lzxdc in June 2020 to amplify the voices of Black professionals in cybersecurity. (It’s running again on October 23rd: https://sharethemicincyber.splashthat.com/) Camille joined us at the Forum to share her wisdom on “Owning Your Professional Narrative.”
Her strategy includes:
That’s a great, concrete strategy for creating a comprehensive professional narrative. But why is that such an important thing to do? For underrepresented groups, particularly Black professionals, there is a very real psychological and emotional burden imposed by “code-switching.” This 2019 Harvard Business Review is a great read to learn more about code-switching (and is not behind a paywall), but as Christina Morillo @divinetechygirl explained in her talk, it’s a way for Black employees and professionals of color to try to overcome negative racial stereotypes by assimilating, or blending in with, the dominant culture in an organization.
Of course, we all engage in some type of impression management to be taken seriously at work or to fit in with our peers. We brush our hair and put on a clean shirt before a Zoom meeting; we waste a day bingeing a trendy Netflix show just so we can be in on the joke of the memes our team keeps passing around. But we generally don’t have to craft an entire alternate identity that’s more palatable to the dominant organizational culture just to prove over and over again that we belong. For BIPOC employees, code-switching may be a demanding and exhausting daily reality. Whether it’s microaggressions or overt discrimination, Christina offers this “human threat modeling” for protecting your psychological safety:
Ultimately, it’s up to all of us to do the work of creating teams and organizations where code-switching isn’t necessary, and to validate and act on the experiences of underrepresented minorities so everyone can bring their authentic narrative to work. Also, we could all use a friend like Christina. You can hear much more from her on the Colors of Infosec podcast she co-hosts with Asif Ahmad.
Ideas for other topics you'd like to see covered in future Forums? Tell us at summit@sans.org.
Launched in 1989 as a cooperative for information security thought leadership, it is SANS’ ongoing mission to empower cyber security professionals with the practical skills and knowledge they need to make our world a safer place.
Read more about SANS Institute