#CFInfluencia Series: Interview with Divya Visalakshi Suresh Kumar

As a cyber security professional, my journey started as a tutor at Monash University in Melbourne. Then from a new bee to an experienced professional, the journey has been quite challenging and entertaining. Having lived in India, Australia, Kuwait, The Netherlands, and Muscat I would say it was a good roller coaster ride. I am in a mid-senior position in cybersecurity and have extensive middle-management work experience.

Worked as an information security specialist in SOC, E2E Applications, Security engineering, ISO27001 LA & LI, supplier security assessments, risk management, Security process creation, and in security policy creation. Throughout my journey, I have picked on other skills in Project management, Problem analysis, planning, design, testing, and documenting procedures.

1. Third Party Exposure and Human errors (Both configuration and being an open-ended social being). One needs to carefully choose to analyze the risk associated with the 3rd party software they use in their products. Continued support, End of life issues, and Open source limitations on the operational and security front need to be checked periodically. Moving to the newer version and the hardware support required are also the catch.
2. Human error is purely related to the skill set gap analysis ad the appropriate training to fix the gap. Apart from configuration training, there has to be aware of social engineering on what can be spoken and what not.

1. Personally, people find me raising questions and only negotiable based on facts. This was well appreciated throughout my journey and I appreciate myself for this attitude that has taken me to this height.
2. Appreciated my project at Monash University and was offered Tutoring. I was well appreciated as a fresher in ABB back in 2008 by my manager as a potential candidate to go all-in-one to complete a Cyber Security project.
3. Performer award in Integrated solutions. In Philips Healthcare I was marked as a notable worker and a good team player by my manager.

1. Money minting business!!!?? if that is your thought on cyber security then yes you are right. At the same time, it is not all about it. Set a goal. The passion in you is the only thing that will drive you and motivate you. It’s not a mentor or someone else who will motivate you, it’s you most of the time. So, stay fit.
2. Information is up on the field, it’s vast. Find the right mentor ( if you have trouble finding don’t delay your journey, you can pick one during your journey) or try finding what is your interest, the area that you like.  As a young professional, try the change once you feel comfortable with one cyber security area. At an early stage its good to do enough mistakes. You might be watched, and criticized but all that in your journey is part of your learning package which will teach you what you need to pick and what you need to drop when you treat someone else. Emotional balance at work is more important.
3. Where do I start in cyber security? If this is your basic, then all you need to do is cover the basics. Network security, Software security, and Hardware Security these three pillars that will remain the same forever. Try making the foundation stronger. You need to cross that extra mile to find where you need to dig the ground. Do not feel a trap by new technologies and specialize in one. Foundation is the key to building your road map in cyber security. Do it when you are young. Once done check on free tools and play within the boundary of legal aspects. There are multiple free websites available to play with. If tools look simple to you then you might start to think about a product.
4. What is a Secure development life cycle means? How do I calculate the risk for my product? Explore why they audit. What is the baseline that I need to set for security? Mark your thoughts in your journal. When you know how people calculate to understand the risk then start thinking beyond that. Who is the one who tells me how I need to work? From where am I getting that? How they are able to frame this? What are the standards, and policies for my organization? From what international standards are they deriving these?
5. I think it’s the start I have given you. I always believe that the younger generation is always smarter. Start exploring and be all ears. Keep thinking if you are bored. In case if you are a person with a career break, be happy you had the time you wanted. Anytime a person can kickstart. Have fun.

I am lucky to be part of CyberFrat.I thank Dr. Ram Kumar for introducing me to CyberFrat. One suggestion would be to start some discussion. A proper place to share queries and seek help can be used as a knowledge base by everyone. Anyone who joins late will definitely think they have missed this all this time. A joyful journey.