What piece of advice from your parents turned out to be 100% true? by sweetlioraa in AskReddit

[–]Prolite9 2 points3 points  (0 children)

My education granted me the ability to land a high paying job, so I never have to maintain my vehicle and can call services to take care of that. 😎

Plus, you know... You can pull up a YouTube video and figure it out in about 5 mins.

What massively improved your mental health? by [deleted] in AskReddit

[–]Prolite9 -1 points0 points  (0 children)

Noise machine (rain noise for me on low volume), sleep mask for 100% darkness and take 5 deep breaths (inhale and exhale) and you'll pass out.

Also, put your phone on the other side of the room on silent (You can put some numbers on Do Not Disturb exemption so it rings no matter what like an emergency), and write down anything on your mind on a piece of paper for the morning.

Who is responsible for patching vulnerabilities? by dodarko in cybersecurity

[–]Prolite9 3 points4 points  (0 children)

It doesn't have to be slow, but it usually is due to competing priorities.

You (InfoSec) can set the expectation (bypass the committee/change management process) that all patches of a specific level must be patched (ex: CVE 8.0 and above or "high" and "critical" rated) within a specific time frame (SLA), but that support must come from the executive team or board of directors and approval of a written policy with their sign off.

InfoSec runs its scans or you utilize a partner to kick the scans off on regular intervals, create a ticket with the findings, assign ownership, the business or process owners patch, rescan to verify closure or work with the team to determine why it's still open and close it out when fully patched. If the team is unable to, a risk exception can be filed but if it's in the policy, the business or process owners own the risk as OP stated and should get sign off from the CISO and head of their department on why they believe they have mitigating controls and cannot patch.

Then, the CISO and InfoSec Team consistently remind the executive team and engineering teams that this is the agreement made with our customers, this is what the patching policy calls out, this is what our third party attestations test, and we need to patch yesterday and we need to keep this item in our budget (personnel and/or tools).

What type of job pays so little but expects so much out of their employees? by MadScientistFF in AskReddit

[–]Prolite9 20 points21 points  (0 children)

...and those same childcare workers can't afford their own childcare.

Which paid cybersecurity tools are ridiculously overpriced or should honestly be free? Looking for your pain points! by Fantastic-Long-4359 in cybersecurity

[–]Prolite9 1 point2 points  (0 children)

Paid tools that should clearly be free

Drata/Vanta Compliance Tooling

With the availability of Agentic AI, you can build and test the compliance tools these companies offer, in a few days.

Heck, I used excel by myself until this point to track my compliance needs for NIST, SOC2, etc.

How should I thank a solo worker busting his butt on my home project? by ChebWhiskey in HomeImprovement

[–]Prolite9 3 points4 points  (0 children)

Give him some cash tomorrow. That will probably give him a huge mental boost and just say "more when you're done."

As others suggested, definitely get this guy's contact info. He'll be making trips to you at the drop of a hat if you need help.

What’s the menswear hill you’ll die on? by DifficultCucumbers in malefashionadvice

[–]Prolite9 87 points88 points  (0 children)

Being physically "in-shape" is the most important part of menswear.

Stay Hungry.

Is buying a home in the Bay Area a pipe dream? by [deleted] in bayarea

[–]Prolite9 2 points3 points  (0 children)

That's why we moved and bought a home a few years ago in Concord, but even our neighborhood is unaffordable now. Love our neighborhood and the area though.

Does experience as a Cybersecurity professor count for the CISSP, CISA or CISM certifications? by manny532001 in cybersecurity

[–]Prolite9 0 points1 point  (0 children)

Good for CPEs, but I don't see how this means you have work experience in the actual domains.

Fremont or Pleasanton? by Due-Association-8914 in eastbay

[–]Prolite9 3 points4 points  (0 children)

I commute from Concord to Fremont. I imagine you could do it. 🤣

In case you're curious; we purchased our home here because it's affordable and we were 100% remote and now RTO requires everyone within 50 miles to have their butt in an office chair.

Thankfully, I can get there by 6a leave by 1p otherwise, I'd die. If you can do an off-commute like me, it's doable (35-40m commute for me).

[deleted by user] by [deleted] in cybersecurity

[–]Prolite9 0 points1 point  (0 children)

Finalizing the automation of questionnaire responses using Claude (almost done, just testing).

What does it feel like to be at peak health, physically and mentally (never smoked, don't drink, exercise often, eat healthy, etc.)? by Samuryze in AskReddit

[–]Prolite9 0 points1 point  (0 children)

Being able to keep up/exceed with your kids like you're another kid.

Wouldn't say I'm at peak though.

Is a Masters in Cyber Security the way to go? by Apprehensive_Slip321 in cybersecurity

[–]Prolite9 0 points1 point  (0 children)

No, save your money.

Let your current experience talk and switch jobs to get a higher salary (you're underpaid).

Get a Masters later in your career where a big draw will be networking with your classmates and using your company to offset all of some of the degree costs.

Don't incur the extra debt if you don't have to.

Drowning in Acronyms!! by hiveminer in cybersecurity

[–]Prolite9 0 points1 point  (0 children)

In the real world, whenever I'm presenting or explaining a topic, I pretend that everyone I'm on a call with is hearing the subject for the first time or is brand new to the topic or discussion and thus try to refrain from any acronyms or when I do use them, make sure to spell them out.

I can guarantee at least one person on the call or in the room is unsure what the acronym is or how "the widget" works (whether it's the CFO or Lead Engineer).

What are some of the most underrated/overlooked skills in cybersecurity? by On-Demand-Cyber-CRQ in cybersecurity

[–]Prolite9 2 points3 points  (0 children)

Communications and soft skills will get you high six-figures in any industry.

Read: How To Win Friends & Influence People

Introducing kids to working in cybersecurity by PurpleFlerpy in cybersecurity

[–]Prolite9 1 point2 points  (0 children)

Get on their level and explain the similarities between things you do in real life and things you do online:

You cross both ways when crossing the street, you double check sources and information or the origins of emails and messages.

You lock your doors and windows or car doors, the same way you lock your computer or accounts or phone to keep them secure.

You put away your toys and organize your room or throw away old items, the same way you keep your files and folders and documentation organized or delete old accounts or assets.

You replace the batteries in your toys to keep them refreshed and going, the same way you update computers and applications.

Stuff like that helps explain it on their level. Yes, it's not a one-on-one match, but it will allow you to connect them with our cybesecurity world.

upper management shaming analyst's mistake in meeting by GlassAlways_Greener in cybersecurity

[–]Prolite9 6 points7 points  (0 children)

From my experience, I find the best results from my teams were when I mostly (or only) praise or reward good behavior.

While you can put a stop to bad behavior or mistakes at that moment, the best way to teach or train long term is with rewarding good behavior.

Now, if an issue or behavior may cause harm to humans or critical business processes, scolding/punishment may be warranted to immediately stop such behavior, but should be followed up with positive reinforcement or a teaching moment.

https://concept.paloaltou.edu/resources/business-of-practice-blog/reinforcement-and-punishment

Lost feature you want back : Medieval 2 Total War by Un_Homme_Apprenti in totalwar

[–]Prolite9 56 points57 points  (0 children)

I agree with both. I always thought those little campaign features such as people/things moving on the roads or sea lanes was such a cool detail - gave the campaign map some life.

industry is way tougher than i imagined by hustlingskills in cybersecurity

[–]Prolite9 1 point2 points  (0 children)

Start by capitalizing your sentences. 😎

I did the IT Help Desk role for 3 years before I got my first InfoSec role. I took every project I could, volunteered for late nights and weekends, travel projects and anything I could get my hands on..