2017 and Tidal Forces
[no description provided]There are two great blog posts at Securosis to kick off the new year:
- Tidal Forces: The Trends Tearing Apart Security As We Know It (Rich Mogull)
- Network Security in the Cloud Age: Everything Changes (Mike Rothman)
Both are deep and important and worth pondering. I want to riff on something that Rich said:
On the security professional side I have trained hundreds of practitioners on cloud security, while working with dozens of organizations to secure cloud deployments. It can take years to fully update skills, and even longer to re-engineer enterprise operations, even without battling internal friction from large chunks of the workforce...
It's worse than that. Yesterday Recently on Emergent Chaos, I talked about Red Queen Races, where you have to work harder and harder just to keep up.
In the pre-cloud world, you could fully update your skills. You could be an expert on Active Directory 2003, or Checkpoint's Firewall-1. You could generate friction over moving to AD2012. You no longer have that luxury. Just this morning, Amazon launched a new rev of something. Google is pushing a new rev of its G-Suite to 5% of customers. Your skillset with the prior release is now out of date. (I have no idea if either really did this, but they could have.) Your skillset can no longer be a locked-in set of skills and knowledge. You need the meta-skills of modeling and learning. You need to understand what your model of AWS is, and you need to allocate time and energy to consciously learning about it.
That's not just a change for individuals. It's a change for how organizations plan for training, and it's a change for how we should design training, as people will need lots more "what's new in AWS in Q1 2017" training to augment "intro to AWS."
Tidal forces, indeed.