code grc

Building a Security Function From Nothing

You are the first and only security person in the company. No budget, no team, and the people who own the systems do not report to you. This segment is the first ninety days: what exists, what you can prove, what you do first, who decides, what you refuse, and what you put in front of a board.

  • trending_upAdvanced
  • schedule7h 35m
  • menu_book12 lecciones
  • publicEnglish
  • workspace_premiumBasic
Building a Security Function From Nothing

Briefing

Somebody has just made you responsible for security at a company that has never had anybody responsible for security. There is no team. There is no budget line yet. There is a list of things people believe are true, an insurer or a customer who triggered your hire, and roughly nine directors who each own a system and none of whom report to you. The hardest part of this job is not technical, and pretending otherwise is the most common way a first security hire fails in year one. You will spend more of the ninety days establishing what you are allowed to decide than you spend looking at anything. The technical work is not the constraint. The constraint is that you can recommend, and somebody else has to act, and they are busy. Across four modules you find out what the company actually has rather than what it says it has, and build an ownership register that starts completely empty and gets filled by asking humans, one row at a time. You write the one page that says what this function will do and what it will not do, and take it to your sponsor for one signature. You work out the three things worth buying with a first budget, the argument for hiring nobody yet, and how to survive forty-five minutes with a finance director. Then you build a ninety-day plan with real dates and write the first board update on one side of paper. You will also learn to distrust your own progress. The activities that demonstrate a security function exists are rarely the ones that reduce risk, and the quiet unglamorous fix that would have prevented the incident is invisible to everybody above you unless you deliberately make it visible. Nothing in this segment produces a policy, a risk register or a gap assessment. Those belong to the segments that own them, and this one tells you when to start them rather than doing them for you. Every figure in it is ranged and dated and is illustrative, because the real numbers depend on your industry, your country and your year.

Temario del curso · 4 módulos

lockSe desbloquea con acceso
  1. 01 Semana Uno, Antes de que Cambies Nada
    3 lecciones·1h 45m

    El instinto en la semana uno es arreglar algo, porque arreglar cosas es lo que sabes hacer y lo que te hace sentir útil en un edificio donde nadie te conoce todavía. Cada hora gastada arreglando en…

  2. 02 El Modelo Operacional
    3 lecciones·1h 41m

    Tienes autoridad sobre nada y responsabilidad sobre todo, y ninguna cantidad de entusiasmo cierra esa brecha. Lo que la cierra es escribir quién decide qué, lograr que una persona lo suficientemente…

  3. 03 El Primer Presupuesto
    3 lecciones·1h 50m

    Un primer presupuesto es pequeño, está vigilado, y lo que hagas con él decide si hay un segundo. El error más común es comprar una plataforma que necesita una persona para hacerla funcionar, lo que…

  4. 04 Noventa días, reportado hacia arriba
    3 lecciones·2h 19m

    Al día noventa alguien decidirá, en silencio, si contratarte fue una buena idea. Esa decisión se toma en lo que han visto, no en lo que has hecho, y son dos conjuntos diferentes. El trabajo en este…

Preguntas frecuentes

¿Qué aprenderé en Building a Security Function From Nothing?
You are the first and only security person in the company. No budget, no team, and the people who own the systems do not report to you. This segment is the first ninety days: what exists, what you can prove, what you do first, who decides, what you refuse, and what you put in front of a board.
¿Necesito experiencia previa?
Se recomienda tener conocimientos previos antes de empezar Building a Security Function From Nothing.
¿Cuánto tiempo lleva completar Building a Security Function From Nothing?
Building a Security Function From Nothing incluye 4 módulos y 12 lecciones. Aprendes a tu propio ritmo.
¿Cómo obtengo acceso?
Building a Security Function From Nothing está incluido en cualquier suscripción de pago.

Más en Programación

Binary, Hex and Data Units
Beginner Binary, Hex and Data Units The topic that costs more marks than any other on the paper, taught by hand. Bits and bytes, binary and hex in all six directions, the 1000-versus-1024 trap, file sizes, transmission times, overflow, two's complement and character sets. Every module ends in a timed drill marked the way an examiner marks it.
Python Desde una Hoja en Blanco
Beginner Python Desde una Hoja en Blanco La secuencia exacta que ya han recorrido nueve estudiantes, desde un archivo vacío hasta un programa que hace preguntas, verifica las respuestas y rechaza entrada defectuosa. Sin experiencia previa en programación. Sin matemáticas. Lo romperás repetidamente, a propósito.
First Program — Scratch for ages 5–9
Beginner First Program — Scratch for ages 5–9 Nine Scratch blocks, three sessions of about twenty-five minutes, and one small program a child of five to nine builds themselves. Written for the parent sitting beside them: what to click, what they will get stuck on, what to say when it goes wrong, and when to keep your hands off the mouse.
IA Sin el Hype
Beginner IA Sin el Hype Qué está haciendo realmente el modelo cuando te responde, por qué eso produce algo que parece pensamiento, por qué inventa citas, y la mecánica de costo que casi nadie explica: un chat reenvía toda la conversación en cada turno. Harás la aritmética tú mismo.
IGCSE y GCSE Computer Science — Teoría que realmente se califica
Intermediate IGCSE y GCSE Computer Science — Teoría que realmente se califica La mitad teórica del examen, enseñada para que sobreviva a la sala de examen. La jerarquía de memoria y qué sucede realmente al arrancar. Compiladores, intérpretes y ensambladores, incluyendo la respuesta que suena correcta y no suma puntos. Bases de datos desde una hoja de cálculo hasta claves y normalización. DNS y la ruta completa entre presionar Enter y ver la página. Software de sistemas, y la sección ética y legal que son los diez puntos más fáciles del examen.
Programming for the Exam — Python Answers That Score
Intermediate Programming for the Exam — Python Answers That Score The programming half of the paper, taught at exam pitch. Pseudocode translated both ways, because the mark scheme is written in a notation nobody practises. Trace tables done column by column, including the ones with a loop and a condition inside it. Linear and binary search, bubble and insertion sort, what each costs and the comparison questions boards love. Validation against verification, and the boundary test data everybody forgets. Procedures against functions, and a systematic method for finding your own error with four minutes left.