How can you learn and share cybersecurity best practices?

Having a strong security culture is the best way for all of us to learn and share best practices. We need to talk openly about threats we see as well as trends. Anyone within an organization can take part in this, even if they aren't on the cyber security team. Best practices can be shared through general conversation, a weekly email, training, and other methods. The main goal is to communicate often and openly.

Everyone learns different choose what works for you. Online courses there are a ton free ones on YouTube, very affordable on LinkedIn learning, udemy courses. I like certs because they help me focused at a time and i learn from small section readings versus a long video and i should be able to quickly retrieve it along the way. I started with Network+, Security+, CYSA+ etc I have more than 10 certs but i am pursuing it depending on how i will utilize it in a current or upcoming role. I recommend ISC2 CC cert for entry even before security + then go from there depending on how that various domains speaks to your passion.

Learning cybersecurity best practices is essential for personal and organizational security. You can start by taking online courses and certifications from platforms like Coursera and edX, or stay updated with cybersecurity books and blogs. Attending webinars, conferences, and engaging in cybersecurity forums or joining professional organizations like ISC2 and ISACA. To share this knowledge, consider conducting awareness sessions for your team, promoting best practices organisation wide, participating in community outreach efforts, and using blogs or social media to disseminate information. Collaboration with colleagues and online communities further amplifies the impact of sharing cybersecurity best practices across the digital landscape.

While many might not set out specifically to learn cybersecurity best practices, the journey of understanding security naturally incorporates these practices. The best way to truly grasp the intricacies is through hands-on experience. As the adage goes, 'learning by doing' is often the most effective. For those interested in delving into penetration testing, platforms like 'TryHackMe' serve as excellent starting points.

If you follow an online course, or want to get a certification focus on the actual knowledge it brings. Too many people are going for a certification because it's a nice badge to have, and hopefully it opens some doors. But there is much more to get from it. Understand what you are learning and how you can bring it into practice. Don't just learn does 500+ practice questions to pass the exam, but make sure your effort actually means something and it contributes to your skills development.

I am a fan of learning on the go like a morning brief such as Cyber Security Headlines or Cyber Security Today etc. There are specific ones i tune is such as cloud security podcast. Networking on LinkedIn & learning from conversations on the posts & comments is golden. You not only establish relationship with like minded pros in the industry but you stay current. We have a committed professionals on the platform who consistently deliver value such as AJ Yawn on Soc 2 & compliance content, Mike Miller for aspiring pros, Joas Santos on Red Teaming, Jerich Beason on CISOs fun, Chris Hughes David Meece, Gabrielle B, Lester Chng etc Don’t shy away from starting to build your own personal brand to add value to your network too.

Build yourself a good group of knowledgeable people. Participate in an ongoing community. Networking events where professionals meet and discuss topics.

While reading blogs and learning from others' experiences certainly offers deeper insights, another effective way to solidify what you've learned is to start writing about it - be it a blog post, LinkedIn update, or even a tweet.

Sounds too simple but Twitter. It is one if the best sources of news, thoughts sharing, and technical tips. It is also so easy to consume - start by following Cyber/Infosec/Security topic, then find 2-3 users from the industry worth following. From there, Twitter’s algorithm will fill your feed with a lot of posts on the topic. I found numerous github projects with nice tools (red and blue side) just by reading my Twitter’s feed.

Emphasize Collaboration and Peer Learning: Cybersecurity is an evolving field, and individuals often learn best practices through hands-on experience and peer collaboration. I'd suggest forming or joining study groups, hackathons, or local meetups where you can exchange knowledge, challenge each other, and learn from real-world scenarios. Collaborative environments often lead to more profound insights and the ability to understand different perspectives within the field.

Explore the Convergence of Physical and Cybersecurity: In today's interconnected world, the convergence of physical and cybersecurity is of paramount importance. Consider a scenario where an organization relies heavily on advanced physical security systems, including access control and surveillance cameras. Without understanding the convergence, they might overlook the fact that these systems are interconnected through networks, which introduces potential vulnerabilities. By exploring this convergence, security professionals can identify and address weak points where cyber threats could compromise physical security.

I wholeheartedly concur that participating in both online and offline communities serves as an invaluable platform for continuous learning and knowledge dissemination. Beyond the learning aspect, these communities also play a pivotal role in enhancing and expanding networking opportunities, fostering professional growth and forging meaningful connections in the industry.

Security threats and vulnerabilities evolve rapidly. Online communities and forums serve as real-time information hubs where members can discuss and disseminate the latest threat intelligence, vulnerability disclosures, and security news including data breaches. Staying updated is crucial in the constantly changing security landscape. Open-source projects and grassroots initiatives often find their origins in these online spaces, leading to advancements that benefit the entire security community. Many times, it helps to benchmark our approach/thoughts in solving a security related problem while looking at other opinions/experiences or key learnings including pitfalls.

Attending webinars and cybersecurity events cannot be over emphasized. Webinars and events can help you stay at the top of Cybersecurity trends, meet up with industry like-minds, experts and get to understand cybersecurity from others perspective while also sharing your own ideas on various cybersecurity topics. Learn, Unlearn, Re-learn….and the learning continues as far as the cybersecurity industry is concerned??

I am learning cybersecurity. It is a bit obscure. That is because the field is vast and has many different components. Knowledge alone is needed because it is ever-evolving. It would help if you had a staff of dedicated individuals constantly learning what threats are out there and what they can do to protect their company's assets.

Always be learning. Doing CTFs, having an account on HackTheBox (HTB), tryhackme, etc. Will all keep you in the game. I would recommend setting up a home lab where you can tinker and mess with new things you come across. Join Reddit communities where people throw new ideas out and test to see if you understand them and if you can replicate them.

I have learned a lot many things on the ground from challenges faced in real-time. For example, when I went through a real-time Cyber Crises Management process while handling an incident, I realized the gaps, as well as the importance of the process in reducing the timeline for thinking and acting. Also noticed that the gaps still exist in human behaviours as we do not prepare ourselves with TTX, which results in poor decision-making during real cyber crises. If we do not keep our knowledge up to date on emerging threats, we may not have sufficient knowledge to defend or detect, and act on them. Hence, learning from challenges, as well as learning about the threat landscape keeps us enabled to act quickly in case of cyber incidents.

One of the best ways to learn cybersecurity best practices is to participate in projects. Take up projects even when they seem too ‘tasky’. Volunteer as team players in projects even when sometimes it’s free, it’s gives you hands-on experience to be ready for bigger tasks and horns your problem solving skills and collaboration skills too??

This is undoubtedly one of the core foundations of building a network. Skills can be taught and learned but how you show up and who you talk to goes a long way especially in this day and age when the job market is highly competitive. Additionally getting a job goes beyond applying. The nuances behind how to properly format your resume, choice of words, metrics etc are what determines if a recruiter will give your resume 6 seconds worth of their time. I offer coaching sessions for beginners and even those looking to pivot within their cybersecurity careers or want to establish their own consulting practices. I have seen it reap untold benefits.

I agree, and in addition consistent and conscious personal effort towards security using the Zero-trust rule will go a long way in building cybersecurity best practices. Also keeping in mind that every data/information is a tool and it depends on who is handling it, it may be a good tool or a weapon.

I have found that when I take on something I want to learn or focus on, there is a specific frame of my mind that enhances what I am learning. For instance, if I get to studying right after I wake up, it takes me 2 to 3 times longer to absorb the information or learn a task. However, if I allow myself an hour after I wakeup and have someththing light to eat, I have a good solid 2.5 hours before I start getting thoughts in my head to distract from my studies.

Cybersecurity needs to be top of mind for organizations of all sizes. Talk about it often. The Internet has changed drastically since we first "logged on." But users don't see much about how or why and haven't adjusted their online habits to accommodate for widespread invisible attacks of opportunity. We have to talk about this often and without inspiring fear. Instead, action. Human action - cyber hygiene into habit building into sharing info with friends, family, and colleagues.

Create a Culture of Continuous Learning: In an industry as dynamic as cybersecurity, staying up-to-date with the latest trends, tools, and threats is essential. I'd recommend fostering a culture of continuous learning within your organization or personal development plan. This could include setting aside regular time for self-study, subscribing to industry publications, engaging with thought leaders on social media, and encouraging team members to share insights and new findings. By making learning a consistent habit, you'll be better equipped to adapt to the ever-changing landscape of cybersecurity.

Speak a 'language' that non-tech people can understand. This applies to frontline employees and management. We should not assume that everyone knows what we're talking about. Explaining concepts goes a long way to helping others understand, learn and pass on the message. Ultimately, that is the goal: to have a strong, educated first line of defence.

One can use social media platforms like #linkedin - the awesome platform, learn and share cybersecurity best practices. Be an active learner where lots of stuff is shared over these platforms which one can learn from, and keep sharing/engaging in what you know regarding cybersecurity best practices. It is required to narrow down on people or pages you follow to your requirements and make sure you get the right information as you browse these pages. Keep engaging with other people with similar interests and discuss ideas as a common goal for learning and sharing cybersecurity best practices.