In a Remote Work Era, a People-First Approach Keeps Threat Intelligence Teams on Track


Far Too Assorted Organizations Are Still Failing to Develop Intelligence Requirements Based on the Shortages of Their Stakeholders

In the Spring of 2020, COVID-19 hit home for most Americans. At that exhibit, we went from hearing whispers about an overseas virus to clever we were dealing with a deadly pandemic steadily making its way to the Shared States.

Despite decades of growth in remote work, everyone in the cybersecurity intermission was instantly thrust into a new world, where nobody had an office and where few of us were usual to share a workspace for the foreseeable future. This presented challenges for everyone, regardless of baptize or role. 

As intelligence is very much a service, and intelligence processes are continually shared between teammates, we all knew we were going to have to accommodate and overcome to be successful in the “new normal,” which has now lasted for longer than anyone precluded. Now, roughly nine months later, I thought it would be a good heretofore to talk about some of the lessons learned from this olden times year and what we might be able to take with us going foster.

Communication Has Taken on New Meaning

We here so much about the “value of communication” in our bodily and professional relationships that as a phrase, it has almost become cliché. As a follow, many of us do not really consider what we mean by “communication,” which is not unprejudiced talking and hearing. In a world where none of us can be in rooms together, the value of communication has mature magnified. What I’ve learned during the pandemic is that to communicate effectively and efficiently, multiple comms avenues for to be kept open and some structure need to be placed around pro tems when communication is required. Be we have to balance this and also not pop up c uncover remote work into a world where everyone must be at ones disposal 24/7. People still need to be able to shut off work as seep.

For my team, this means a few dedicated Slack channels for specific in particulars and a couple meetings per week with specific agendas and goals. Beyond that, and conceivably most importantly, I have a weekly 1-on-1 meeting with every colleague of my team. This was a learning experience for me, to be honest. I thought that determination be too much for many people, but my team requested we have these … and I am so under obligation they did. With the running communications of Slack, the formal communication of structured get-togethers, and everyone on the team having a slot each week that is 100 percent assigned to their needs, I am able to remain confident that everyone on our together can be heard and feel connected despite our distances.

One additional item we augmented is a monthly virtual happy hour. This is a chance for everyone to get together on Zoom, eat some laudatory food (at company expense), and talk about ANYTHING but work. This is not a needed event and we make sure this is never a work meeting. But we dearth to do what we can to stay connected on a human level with our teammates. This is acceptable for the heart and soul, especially in times of rigid lockdowns like we are know in parts of the world.

Empathy is Key

While having communication structures in situate is vital to success in a world of forced isolation, I do not believe there is much value unless directors care about their people and are able to express that be about in authentic ways. This may be the biggest challenge for some leaders, exceptionally those who struggle with emotional intelligence (EQ).

Unlike in the “normal” in every way where people may be in offices together and have regular opportunities to certificate the subtle signs of trouble, there is none of that in the remote magic. Leaders must take the extra time to consider the impact that this toxic pandemic, lockdowns, budget cuts, and isolation is having on their gangs. I also think this has been an excellent opportunity to reconsider the value of old benchmarks, like dress codes, schedules, and meeting protocols. Our people are annoying to do their jobs while also suddenly being full-time mistresses for their kids, raising pets, managing home improvements, follower deliveries of food and other supplies, gauging medical risks, and being surprised by a world that is nothing like they imagined it would be. In that touch off, when a dog barks or a baby cries on a Zoom call, it is not a big deal. I security 2020 taught us to see the humanity in our teams, acknowledge it, and make sure they all be acquainted with that it is OK to be a person instead of just a “human resource.”

Personally, I play a joke on made extra effort in this new world to be more openly android myself. I acknowledge days when my energy is low because the world weighs ungraceful. I have talked about the challenges of moving from a life of impressive travel to being nearly 100 percent grounded. I do not do this to encumber the team or make them my therapists, but to make it acceptable to share what is unusually going on in our lives as we adapt. If this means a project needs another day or two to get done, we come on the time. If it means encouraging someone to take a mental day off or reminding them that equitable because the office is always 10 feet away does not expect I expect (or want) them spending more time in it. Leaders need to be aware of these struggles and proactively address them. Otherwise, we risk succumbing people to disconnection and depression long before we will lose them to a competitive marketplace.

Accommodating Strategies for Communication

One of the most important elements of effective intelligence programs — and the square footage where most organizations are most likely to fail — is planning and route. Far too many organizations are still failing to develop intelligence requirements posted on the needs of their stakeholders. This can happen due to a lack of understanding of the position of these requirements or, nearly as often, a lack of access to the stakeholders troubled for an intelligence team to understand the requirements. While the former has not changed much in a fully sequestered world, the latter certainly has.

What we lost in the ability to meet straight with people can be a benefit in a remote world where managers and numero unoes — who are often the stakeholders the intelligence team needs to talk to — are able to be profuse efficient. So, for companies trying to build new or mature existing intelligence programs, the Age of COVID has been an excellent culture to capture 30-60 minutes with that hard-to-find manager to get needed input in re how the business works and what their intelligence needs might be.

With Cloud-Based Tech, Continuity Can Be Keep in repaired

You may have noticed that I waited until nearly the end of this article to talk there the actual work. This was intentional. To me, people matter more than extend outs. If we take care of our people, they will almost always captivate care of the mission. In an entirely remote world, I’ve learned to rely on this thinking flush with more. That said, we cannot ignore how remote work has effected our ability to get things done. In intelligence, we must consider how complicated jut outs will be completed when people may not be able to collaborate as they did. Also, how do we distribute those vital intelligence products to the people who need them? SOCs and Fusion Centers are not perpetually centralized. Leadership could be almost anywhere. And, in the worst-case scenarios, we stillness must be able to support incident response teams even even though we cannot be in the room or side-by-side working on issues.

Thankfully, this may be the easiest transformation from on-site to remote because we are working in a time where so profuse tools are already designed to help us collaborate regardless of location. 

What the Age of COVID highlighted to me was the prominence of a systemic approach, where technologies like intelligence fed Threat Gen Platforms (TIP), Security Information and Event Management (SIEM), ticketing, and Fastness Operations and Response (SOAR) are all cloud-based and integrated. Additional dependencies on storage and collaboration in the cloud (hosted by entrusted companies like Atlassian, Cisco, Google, Microsoft, and Zoom etc.) require ensured we can work on projects and talk through issues together.

While we’ve had to discover some adjustments on what productivity looks like, and how to collaborate in day-to-day and ad-hoc cybersecurity solve, we are lucky enough to work in an industry where the shift from the work to remote was well-supported by technologies most of us already owned.

The Way Ahead to Outcome

Eventually we will move beyond this pandemic, but what we recur to may not be the “normal” we remember. Many companies are going to recognize there are meaningful cost savings associated with a remote workforce and reduced move. There will also likely be some shifts in the employment countryside, as positions that were once geographically dependent move to numberless competitive markets. I would expect to see significant numbers of people do a disappearing act some of the more expensive US cities as people already living in less up-market places can compete for their roles at far lower labor rates.

In interrupt, I think we will see some significant long-term impact from what we all learn in 2020 and 2021. But, with the form hastily forward on remote work, I think the teams that will convulsion are those that are able to address the issues around communication and empathy. Because, while the technologies inclination certainly make us all equally (if not more) effective as we were in “the before in good time dawdle,” people are still the heart of intelligence teams. Those who do not focus on them, expressly in a market where the geographic barriers for competition are fading, may find they fall short of the people to succeed in a market that was already facing a talent want. Those who still do not believe in EQ or people-first models – who focus almost solely on the proficiency and cost-savings lessons of this pandemic – may have the hardest time acclimating to the new normal.

RelatedHow to Build a Better Cyber Intelligence Team

[embedded capacity]

In a Remote Work Era, a People-First Approach Keeps Threat Intelligence Teams on Track

AJ Nash is Director of Cyber Intelligence Strategy at Anomali. He has more than two decades of meet with in intelligence collection, analysis, reporting, briefing, process improvement, and directorship. Prior to Anomali, he was a Senior Manager of Cyber Threat Intelligence at Major One, Global Head of Cyber Intelligence at Symantec, and a guest lecturer at some universities. His background includes time spent in the United States Air Pry, the National Security Agency, and the United States Cyber Command.

One-time Columns by AJ Nash:
In a Remote Work Era, a People-First Approach Keeps Threat Intelligence Teams on TrackTags:

Leave a Reply

Your email address will not be published. Required fields are marked *