What do you do if your information security feedback is hindering your professional growth?

1 Assess the feedback

The first step is to assess the feedback objectively and critically. Ask yourself: Is the feedback based on facts, evidence, and standards, or on opinions, assumptions, and preferences? Is the feedback relevant to your role, responsibilities, and objectives, or to the giver's expectations, interests, and agenda? Is the feedback clear, specific, and actionable, or vague, general, and confusing? Is the feedback balanced, respectful, and supportive, or harsh, negative, and demoralizing? By answering these questions, you can determine the validity, relevance, and usefulness of the feedback.

2 Respond to the feedback

The second step is to respond to the feedback appropriately and professionally. Avoid reacting emotionally, defensively, or aggressively, as this can damage your reputation and relationships. Instead, thank the giver for their feedback, acknowledge their perspective, and ask for clarification or examples if needed. If you agree with the feedback, express your willingness to learn from it and improve your performance. If you disagree with the feedback, explain your reasons politely and constructively, and provide your own evidence or arguments. If the feedback is irrelevant, inaccurate, or biased, you can ignore it or challenge it respectfully.

3 Learn from the feedback

The third step is to learn from the feedback and apply it to your professional development. Identify the strengths and weaknesses of your information security skills, knowledge, and performance, and set realistic and measurable goals for improvement. Seek out additional feedback from other sources, such as peers, mentors, managers, or clients, to gain a broader and more balanced perspective. Use the feedback to update your knowledge, refine your skills, and enhance your performance. Monitor your progress and celebrate your achievements.

5 Give feedback constructively

The fifth step is to give feedback constructively and respectfully. As an information security professional, you may also be in a position to give feedback to others, such as colleagues, subordinates, or clients. When you do so, remember to follow the same principles that you expect from others. Base your feedback on facts, evidence, and standards, not on opinions, assumptions, or preferences. Make your feedback relevant, clear, specific, and actionable, not irrelevant, vague, general, or confusing. Balance your feedback with praise, respect, and support, not with criticism, negativity, or demoralization.

6 Feedback is a two-way street

The sixth step is to remember that feedback is a two-way street. Feedback is not only a tool for learning and improvement, but also a means of communication and collaboration. By giving and receiving feedback effectively and constructively, you can build trust, rapport, and mutual understanding with your information security stakeholders. You can also demonstrate your professionalism, competence, and value as an information security expert. Feedback can help you achieve your professional goals and advance your information security career.

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?