Episode Cover Image

350- Practical Security Layering Techniques, Done Right by Noah Mechnig-Giordano

350- Practical Security Layering Techniques
Dissecting Popular IT Nerds
350- Practical Security Layering Techniques, Done Right by Noah Mechnig-Giordano
Loading
/

Practical security layering techniques, done right by Noah Mechnig-Giordano

There can be no compromises when protecting the core.

Traditional security frameworks are falling behind. Noah Mechnig-Giordano, IT leader at 26, uses the MITRE Att&ck chain to map out threats and lock down mission-critical assets first.

He uses AirGap for network isolation and goes beyond quick fixes in his approach.

As an IT leader, he builds in-house AI solutions to keep data safe—without relying on risky third-party tools.

Whether you’re a CIO, CISO, or IT manager, this episode will change how you think about security and AI.

“True career growth comes from finding and committing to the place where your passion fuels progress and you feel empowered to grow, because while this path looks different for everyone, the impact is equally life-changing.” – Noah Mechnig-Giordano

Disclaimer: The views, thoughts, and opinions expressed by guests on this podcast are solely their own and do not necessarily reflect the views or positions of their employers, affiliates, organizations, or any other entities. The content provided is for informational purposes only and should not be considered professional advice. The podcast hosts and producers are not responsible for any actions taken based on the discussions in the episodes. We encourage listeners to consult with a professional or conduct their own research before making any decisions based on the content of this podcast

Practical security layering techniques, done right

3 Key Takeaways

Episode Show Notes

00:28 – How video games led Noah to IT

01:32 – First gaming memory: Halo 3

03:51 – Security strategies using MITRE’s framework

06:04 – Tools for email and password analysis

08:37 – Practical AI use cases vs. hype

10:47 – Addressing leadership fears about AI

12:50 – Demystifying AI’s “black box”

17:07 – Managing a small IT team

19:50 – Why coding literacy matters for leaders

27:05 – Cross-department AI project success story

32:32 – Combating burnout with focused projects

35:41 – Vendor pitfalls in security solutions

43:31 – Top security tools and lessons

Transcript

Speaker 0 | 00:00.800

Everyone out there listening to Dissecting Popular IT Nerds, this is Phil Howard, your host, and we’re speaking with Noah. I do not want to butcher your last name. I’m going to try Meshnik Giordano.

 

Speaker 1 | 00:13.065

That is very close. Yeah, Meshnik Giordano.

 

Speaker 0 | 00:15.706

Very solid. Okay. That could have been really bad for me there. So first of all, man, talk to me, because chances are you didn’t grow up in IT using floppy disks. It’s just a…

 

Speaker 1 | 00:28.532

it’s just a hunch man how’d you get started in it yeah so i um being 26 year old uh years old that is a very accurate statement i did not grow up with floppy disks um i got started now man i’m telling you you missed out but anyways go ahead i got started with honestly a love for video games and then a severely lacking skill in math and then as i went to college i decided that You know,

that’s something I should explore, something I’m weak in instead of something that comes more naturally to me. And then from there, that’s really just where I fell in love with it. And I think I got in at the right time because now everything just seems to be revolving around IT.

 

Speaker 0 | 01:09.070

Wow, so you’re one of those people trying to fix a weakness. I’m one of those too. I was terrible, terrible at writing in English and all that stuff. I was a creative writing major. Ended up in IT, kind of. Okay, so this will be fun then. What was your very first video game recollection of any video game that you ever remember playing? What was the very first one? We’re going to compare.

 

Speaker 1 | 01:32.269

All right. That’s a great one. I would say a game called Halo 3. That was kind of a transcendent experience for me at the time.

 

Speaker 0 | 01:42.895

Yes. Yes, it was. I don’t know. What would the word be for me? More like not transcendent. It would be like, let’s just put it this way. The very first video game that I remember playing off the top of my head right now, Pong.

 

Speaker 1 | 01:55.810

Okay, yep.

 

Speaker 0 | 01:58.891

Pong. Two sticks. Two white sticks and a white ball that was really a square. It’s really a square. I mean, the difference. Just think. Halo 3. That was, probably was even already a father at that time and beyond my video game playing days. Even though we have a PlayStation 5 now. And I’ve. kind of tried to get back into it. Soccer and hockey and let’s see,

I don’t know, whatever, Gran Turismo. But that lasted for a little bit of time. And then I realized I have no time.

 

Speaker 1 | 02:30.065

So absolutely. Yeah.

 

Speaker 0 | 02:31.966

Okay. So trending topics, things that I would really love to get your thoughts on. And one of them would be, how do you ensure upper management is not fearful of the. How do you convince upper management in the importance of security without using fear as a tactic?

 

Speaker 1 | 02:55.929

Yeah, no, I think that’s a great question. I’d say my experience was a little bit unique. I kind of started out in the security realm with a lot of upper management buy-in.

So there was really not a lot of resistance that I faced there. But I would say really just having the facts, having the data to support what that’s really going to do for the company and how important that really has become.

And that’s something you really can’t compromise on these days, even in a midsize company, even in a company where you may feel we might not be a subject for attack or a target specifically. It’s just become an absolute vital part of, I would say, every IT stack.

So I didn’t face a lot of resistance, but really to push that through and to really expand that infrastructure out, it was really just a matter of demonstration and showing that potential.

 

Speaker 0 | 03:43.770

And what is, what are your, I don’t know, what are you… What are your security layering techniques?

 

Speaker 1 | 03:51.114

Yeah, absolutely. So there’s a lot of different acronyms, but we followed the MITRE attack chain. I believe it’s called the kill chain very closely.

And then we also really structured it around building out from mission critical assets as that was one of the primary focuses for at least our company and organization was making sure that those mission critical assets are protected so that production can keep running and the entire business can keep running. So then as that as a core,

just expanding out to every facet that could potentially translate or reach our mission critical assets.

That was the first avenue. And then from there, it was really a very consorted and focused effort on the actual users that are going to be interacting with those security layers, making sure that they’re knowledgeable and making sure that they have that kind of training themselves.

 

Speaker 0 | 04:39.410

Okay, if you were in a room with, I don’t know, just the rest of your colleagues or something like that, no one in the outside world was… really allowed in, what would you want to ask them?

 

Speaker 1 | 04:49.392

In regards to security?

 

Speaker 0 | 04:51.014

Yeah, I’m just curious. Like, is there something that you would ask or something that you would offer up? I’m just, people want to talk about security layering techniques, so. I’m just curious. I mean, or how about this would be better if they were to ask you, you know, how do I better implement security layering techniques?

What would your advice be to them?

 

Speaker 1 | 05:08.495

Yeah, I would say there’s a lot of simple pieces that are still I’m seeing being overlooked. One of the most basic of those is just being passwords, right? Just making sure not to reuse your passwords, making sure to have different passwords for different functions.

I’ve seen that time and time again, where, you know, people really easily fall into that cadence of just having one password that they use for everything.

And I find that to just be a very easy starting point. And then outside of that, it’s really just a mindset as to how you interact with the internet,

as well as how you interact with any of the systems you may have at your company. So not going to malicious websites and just practicing kind of common sense knowledge as to how to interact with potentially threatening or potentially malicious environments.

And I think a lot of it really does come down to just common sense and having a few basic tools at your disposal to recognize and to check a few things that may flag some suspicion.

 

Speaker 0 | 06:03.005

Favorite tools? What are they?

 

Speaker 1 | 06:04.865

I’m a big fan of, I forget the name off the top of my head, but one of the great tools is just being able to input, for example, an email address you may feel suspicious of, and then just being able to trace through and see the origins and the creation of that email address. That’s proven to be exceptionally useful just on that. side alone.

And then also having some tools in place to just analyze your passwords and their strength, because that’s always going to be an ever-evolving landscape.

And as computing power increases, what you may have previously thought to be an ironclad, bulletproof password may no longer be as secure as you once thought.

 

Speaker 0 | 06:42.758

If you had a security one-liner, a security one-liner truth, what would your security one-liner truth be?

 

Speaker 1 | 06:49.364

Ooh, that’s a good question. I would say it’s to always be vigilant and aware and cautious. I think really with those three principles there, you’re able to really overcome a tremendous amount of risk out there just from a user potential.

 

Speaker 0 | 07:03.538

Okay. And if you were to tell your users this security one-liner truth, what would it be? Be paranoid. You know what I mean? What would your one-liner be? If they’re like, he’s always saying this about security. What is that one-liner security truth?

 

Speaker 1 | 07:21.654

I do like being paranoid. That’s a good one to an extent. I think that that is a very valuable mindset to have, especially in this landscape, as it is just always going to be changing. It’s something that’s very hard to pin down and have a very secure understanding at a stagnant position.

And then you have to always be learning and adapting what that looks like. So I think be paranoid may encapsulate that pretty well.

 

Speaker 0 | 07:44.492

Are you one of the few that is blessed with, it doesn’t happen that often. It doesn’t happen that often, but are you one of the few that gets blessed with every now and then someone trying to feed you a heavy dose of AI anything?

 

Speaker 1 | 07:59.187

Oh, absolutely. It’s very rare. Absolutely very rare. But no, I do feel that almost everybody has an AI something, AI solution that they’re looking to sell or looking to implement 100%.

 

Speaker 0 | 08:13.331

So there’s a lot of questions that can revolve around the AI thing. And I guess one of them would be… Have you run into any very practical AI use cases that are real and that you’ve actually implemented versus some other layer of AI hype that we all find ourselves in?

 

Speaker 1 | 08:37.002

Yeah, that’s a great question. I would say that there’s certainly a few that I found a lot of value and benefit in. However, I will say that those are solutions that I created myself and they’re things that I use myself.

Because I think that a lot of it really comes down to how those solutions are being implemented and where that responsibility of usage is kind of placed.

And I think too often that is not really placed in the control of the users or they don’t have that understanding to interact with these tools effectively in a way that’s actually going to be

beneficial in that use case, especially when looking at the long run. So a good example is I’ve developed kind of an offline… AI model to write emails, or I would say more so to edit emails, because I think that that’s a very easy trap to fall into. If you just type an AI prompt, hey, write this email for me, et cetera, and then it just spits it out.

I think a lot is lost there, but I think that it is very valuable as a launching point and jumping point to facilitate creativity and critical thinking when used correctly. But I think that a lot of the solutions out there, they perhaps try to take too much out of the hands of the user.

And then you lose a little bit of that creative spark and critical thinking.

 

Speaker 0 | 09:52.640

Yes. Which kind of leads to how can Well, let me ask it this way. Does your leadership ever come to you and ask you about, what should we be doing with AI? Or what should we be doing here? Or do they ever come to you and say, hey, what do you think of this? Or let’s implement this. Or I saw this.

 

Speaker 1 | 10:12.799

Absolutely. Yeah, that’s definitely been a common trend where there’s been a few solutions out there that leadership has felt and other team members have felt that would be beneficial to implement. My response to date has typically always been no for those, but that wouldn’t be a recommendation.

So we actually have not leveraged or implemented any external or third-party AI solutions. We’ve kept that completely in-house on all that development internal. And the primary reason behind that being security, as well as the actual usage of those solutions.

 

Speaker 0 | 10:47.804

Okay, great. So, okay, so here’s the big one. How can IT leaders… convince executives that AI is an enabler and not a replacement for workforce or other tasks? Might be a task, might be a replacement for a task name, but how is it an enabler, not a replacement? And do you think that that is a fear?

Do you think there’s a lot of IT leaders out there or people that are fearful of their jobs or worried about how executive management or people may think that AI is taking over and going to replace things?

 

Speaker 1 | 11:21.333

Absolutely. I think there’s definitely a certain level of fear, but I think that that fear is quickly dissuaded once you really start interacting with these models and looking at them. I think you can very quickly see that we’re not that close, perhaps, to a point where it can start really replacing that top-level creative decision-making.

And I think, to your point, it is effective in automating and reducing manual tasks. However, the way I see that is just an opportunity. I think that then just allows those people in those positions who may have a portion of their job automated,

it allows them to start thinking about that next level and taking their work to, you know, an entirely new place as they’re not having to spend that time worrying about these more mundane tasks that really can be very easily and effectively automated. And I would say to answer your first question about, you know, how to tackle some of those fear factors into…

kind of explain that to leadership. I think the most effective way is really just demonstrating results and showing how it can be effective and demonstrating how that hesitancy is not always as deeply founded as potentially it may initially seem to be. As a lot of these things, once you really start interacting with them,

and especially as once you start pulling back the curtain and not treating AI as kind of this black box that you can’t look into, I think then that’s when a lot of this fear… potentially or should dissipate.

 

Speaker 0 | 12:47.245

Explain the black box analogy a little bit.

 

Speaker 1 | 12:50.286

Yeah, no, I think that a lot of times an AI model is just seen as this magic little box and you put a prompt into and then you get a result out of and then you’re not actually able to see anything deeper into the process behind it or interact with how that model is arriving at the result. And I think once you start analyzing that, you can really see the actual potential and also the immediate limitations that exist currently.

 

Speaker 0 | 13:14.613

Okay, so let’s go a little bit deeper. Are you saying they’re not prompting correctly, so you may not get a deep enough answer? And if you understand where it’s pulling that data from, then you know that it might be lacking.

 

Speaker 1 | 13:27.183

Right. And once you really understand what the model is actually doing and where it’s sourcing the data, how it’s being trained, that’s when you can,

I think, have that deeper understanding of analyzing and looking at what those results are and then understanding them on a deeper level. and seeing maybe it goes into the wrong direction, but then you can understand why it did so. And even if it goes in the right direction, I think it’s also important to understand how it arrived there.

 

Speaker 0 | 13:52.272

Okay, enlighten us. Where is the model pulling this stuff from? Enlighten us. Tell us how it works. How do ones and zeros translate into pictures on the screen and do all of that? That’s really mind-blowing to begin with. But no, how is AI working?

 

Speaker 1 | 14:08.484

Well, I would say I’m far from a subject expert, but from my limited understanding,

 

Speaker 0 | 14:13.706

I would say it’s good that it’s limited. It’s good that it’s somewhere in between because you’re translating for executive management. Right. That things might think it’s like this. They might think it’s like Terminator 2. They might. You know what I mean? No, for real. For real. You know what I mean?

That’s kind of like where executives are. They can do everything. It’s the, you know, it’s like, you know, it’s the changing of the guard. It’s something like this. You know what I mean? But then it’s, it’s really not that it’s really somewhere in between.

 

Speaker 1 | 14:37.712

Right. I think the simplest way perhaps to think about it is it’s pulling everything essentially from the internet. So I think that that’s a good starting point is to look at and think about how you as a person personally in your life or even professionally interact with the internet and then how you naturally have these processes built in where you question,

you double check, if you find a source, you dig a little bit deeper to verify and validate that that is actually what you’re looking to inquire deeper about. And I think if you apply those same concepts, then you can quickly understand a little bit better about how AI may go into one direction or another,

have certain biases, as these biases and different directions are clearly visible just by interacting with the internet on a daily basis.

 

Speaker 0 | 15:21.749

What do you see, since you have the luxury of being young, younger, what leadership challenges have you faced? Where do you see the biggest leadership challenges from an IT leadership standpoint being these days?

 

Speaker 1 | 15:39.939

Yeah, I think one of the biggest challenges is definitely going to be adapting to a very, very evolving and fast-paced landscape in the IT world. I think it’s… exponentially increasing in pace in terms of what’s changing, what’s new, what’s coming to light and what can be used. And I don’t have the experience going back much further,

but I would say that we’re really in a stage where that exponential increase is a lot faster than perhaps we’ve ever seen before. So it can be potentially daunting and challenging to have an understanding and keep that understanding as to what’s really out there and what IT can do for you.

I think that if you gain that understanding at any certain point, then six months down the road, that can already potentially be out of date.

 

Speaker 0 | 16:25.466

Yes. What we thought, even I would say a year ago, if you look at how much even just the AI models have changed in a year, what we thought was going to be possible, at least I had a colleague the other day say, you know, I kind of thought that this AI model would be able to help us do this. And a year later, it’s a completely different world

and it’s not even. not even a thing anymore. That was just the AI example. And we were thinking about different prompts for, I don’t know, just different research purposes. And it’s, I don’t know, it’s just whatever evolved. It’s like, just, that’s not even a thing anymore. I don’t even know how to describe that. As far as being an IT leader, do you have a team underneath you?

 

Speaker 1 | 17:05.355

Yes, I do.

 

Speaker 0 | 17:06.236

How big is your team?

 

Speaker 1 | 17:07.737

Currently it’s, it’s relatively small, just two team members. But that is actually due to a recent right sizing that we do expect to expand this year. to hopefully around four or five.

 

Speaker 0 | 17:19.405

Do you find IT leadership to ever be lonely at the top?

 

Speaker 1 | 17:27.027

I think it certainly can be. I think it really depends on the specific company you work for and then that leadership structure above. In my case, it’s quite a specific example, but the president of my company was actually the previous director of IT. So there is a lot more of that understanding.

where I do have somebody that I’m able to bounce ideas off of and get a little bit more in depth with at the top of the leadership level. However, I am aware that that’s quite a unique scenario and would not really exist across many other businesses.

 

Speaker 0 | 18:01.759

Okay, so then how could we create that for other people? I guess what would be the unique? And I was speaking with a colleague earlier, Denise, and she said, we have to be able to teach leadership how to speak to IT, which is kind of interesting. But I would assume that your leadership already knows how to speak to IT because they were the previous IT. So what’s special about that?

 

Speaker 1 | 18:30.473

Yeah, I would say the depth and the understanding that exists and that communication is very fluid. And it allows us to really get into a lot more of a deeper understanding when it comes to new IT solutions, existing problems, and the landscape in general. And I would say that we could probably see that progression happen organically.

I think it does need to be accelerated going forward. But I think that as the next 10, 15 years, perhaps, that new wave of leaders come into those positions, I think that we’ll see a lot more of them have that IT fluency and are able to communicate better with… their IT leaders, respectively.

 

Speaker 0 | 19:08.545

What would your advice then be to the people that don’t have that fluency?

 

Speaker 1 | 19:13.086

I would say it’s very important to learn, to just have some experience. Go out there, try to interact, play around with some things. Even if it’s not initially successful, I think that that’s going to be a very valuable understanding. And I think one of the cores of that is having some kind of knowledge of programming and coding.

I think that’s something that is a little bit too rare. in the leadership side.

And I think that that does have a lot of translating benefits when you really get deeper into those conversations and understandings. You don’t kind of hit that wall where then you can’t explore any deeper once you get into the actual programmatic side of the house.

 

Speaker 0 | 19:50.698

So Trump should go take a Python class? No, but really, what would your advice be to the president when it comes to technology in America? Like, hey man, you need to know a little bit of coding.

 

Speaker 1 | 20:06.357

I think that would, I think that that would definitely have some merit and some value. I think, especially as we, we dive deeper, uh,

 

Speaker 0 | 20:12.721

all the show technology advice to president Trump.

 

Speaker 1 | 20:17.044

That’s a great,

 

Speaker 0 | 20:17.545

just because, you know, um, what’s the unwritten rule? What’s the unwritten rule of it leadership that no one talks about?

 

Speaker 1 | 20:25.158

I would say that’s a tough question. The unwritten rule.

 

Speaker 0 | 20:29.021

I don’t know the answer. I’m just asking it. I mean, I’m trying to fire off the hardest questions of all now. That one’s difficult. I mean, what is the unwritten rule of IT leadership that no one talks about? They’re afraid to talk about it. There’s something that IT leaders are afraid to talk about.

It’s the unwritten rule. I’m going to, I mean, I have a couple guesses. I think it has something to do with probably like vulnerability or something like that. What’s the… maybe something around empathy. I don’t know. Or what is it?

 

Speaker 1 | 20:56.479

Yeah. I mean, I would say-

 

Speaker 0 | 20:58.539

But I think they like to talk about empathy. I think leaders always love to talk about empathy. It’s just, I don’t know. What is it?

 

Speaker 1 | 21:04.901

Yeah. I would say, maybe I’m just thinking about the AI side still, but I would say the unwritten rule perhaps there is that that barrier to entry for AI products, AI commercialization has become incredibly, incredibly low. And it’s actually- very, very easy and simple to spin up a solution. It’s essentially just become a matter of API calls.

And then you’re already able to have a commercialized version of ChatGPT or anything of the sort to have any kind of specific use case or functionality. And I think that that needs to be potentially explored a little bit in a larger light, that that’s actually really not such a mystical and challenging piece to accomplish to develop those pieces in-house.

 

Speaker 0 | 21:50.254

So we should be developing our own apps that are essentially good prompting with a white label on top of it inside of Square.

 

Speaker 1 | 22:01.960

In a sense, yeah. And I think that that allows you to really tailor that. So I think what a lot of these products come down to is really the use case and the interaction with the model, as opposed to rather the actual model itself and the, you know, in quotes, thinking that’s occurring behind the scenes. And so I think having that ability to do that in-house allows you to create a lot more tailored and effective solutions and save a lot of money as well. Really make that more of an affordable endeavor.

 

Speaker 0 | 22:29.958

If you could bring the head mind of one thing that really knows how to prompt AI very, very well, then you could essentially clone yourself, kind of, by then putting that tool into the hands of other people that could use it. Is that kind of what you’re saying?

 

Speaker 1 | 22:47.994

In a sense, it can serve a little bit as a proxy. Absolutely. You can kind of spin up these different proxies and have that work very effectively to expand and have that interaction be not so limited to potentially one person or two people. I would say a good example of that is at my company that I work for, there’s only,

I think, two or three people that have knowledge of programming. And so that’s oftentimes something that is needed is to have some kind of programmatic logic developed, some kind of small platform or configurator, etc.

And I think that instead of having that be bottlenecked at those few people, it’s very simple to spin something up that then could deliver that same output and that same product and not necessarily have to go to those people specifically and especially not for that initial creation phase, ideation phase.

You can get really, even without any knowledge, I would say with an effective tool, you can get maybe 70 to 85% of the way there and then just have those specific team members, you know, finish that out or take that to a more polished state. I think that’s a really effective use case that I’ve seen.

 

Speaker 0 | 23:55.641

Wow. You’re asking a lot. This is great. No, for real. You’re asking a lot. If you’re basically asking, hey, Mr. End user, look, I know you don’t even know what coding is. I know you have no clue. But I want you to play around with ChatGPT. I want you to pull up this little thing. I want you to ask it to develop some code.

And then if you don’t know what it looks like, ask it to pull it up in this other video. It’s going to have you go to this website. It’s going to have you cut all this code. It’s going to put you on the website. And you’re going to see what the end result looks like. I want you to do all that first and then bring it to me. And then I’ll finish the job.

 

Speaker 1 | 24:23.405

And I’ve seen that actually at the company I work for very effectively take place. And I think that there are a lot of tools that can really also help guide that journey. And to make that not such an isolating potentially or daunting experience, I think with just the right questions even that then lead into that prompt or lead into what’s being generated,

you’re really able to make a lot of progress without having to have that internal knowledge. Now, sure, that internal knowledge is very helpful and allows you to operate a lot more independently.

However, at this stage, that I would say is most likely an unrealistic ask is to have the head of HR to have knowledge of Python or programming or something like that. However, I have seen with our head of HR that they’ve been able to just with chat GPT and a few pointers and a few directive questions, able to spin something up that is really quite effective.

And then it was just those last polishing steps of, you know, deploying it correctly, making it be able to, you know, function and the UI and UX pieces.

 

Speaker 0 | 25:22.679

Okay. All right. So here’s the use case we’ve all been looking for. You’re like the technology enabler. So your job shouldn’t even be whatever anymore. It’s a technology enabler. That’s really what the, is that what the modern IT person is going to be? The person that has more knowledge of networking and all this stuff.

And then they’re going to enable technology within the business. And that’s what’s going to save the IT guy from being fired or something. I don’t know, unless you go to school for becoming a technology enabler in the future.

Please, I’m dying to know what this use case is. Are you allowed to share? HR, AI, use case. It’s an AI technology leadership. I mean, it’s actually a pretty big deal. This is actually pretty mind-blowing. I don’t know how to title this yet, but I want to know what it is.

 

Speaker 1 | 26:10.179

Yeah. So I would say this is an interesting example because at our company, we wear a lot of different hats. This was actually kind of a cross-functional effort between HR and sales, interestingly enough. And so this was really a sales configuration tool that had some of those project planning and HR factors in place as well.

And that was something that this team member was able to spin up very, very effectively. I would say really maybe 85 or 90% of the way there, just through ChatGPT and a few kind of guiding questions and launching points.

But it enabled that team member to really think a lot more freely. and not immediately feel limited or hemmed in by technological constraints. They were able to just explore, I would say. And I think that’s really something that we need to see more of. And that’s a really effective relationship between HR, or I should say IT and these other departments.

 

Speaker 0 | 27:05.955

Okay. So what was the, I guess, the challenge or the problem to begin with?

 

Speaker 1 | 27:09.796

Yeah. The challenge to begin with was having a very clear understanding and giving our sales team something where they can… essentially walk into a sales call and be able to on the fly configure different proposals, different combinations of items, different configurations of those items, not having to essentially in those negotiations,

go back into our system, repopulate an entirely new proposal, but be able to on the fly adjust, make changes and additions. That was the real problem use case that was the genesis for this.

 

Speaker 0 | 27:42.502

And how was HR involved?

 

Speaker 1 | 27:45.644

I would say HR was involved just because that particular team member was wearing multiple hats. I wouldn’t say this was strictly an HR-related project in a sense. It was more so just something that they had been working on as they’re also leading on the project and strategic development side.

 

Speaker 0 | 28:03.236

Okay. And do we have all said SKUs and items and pricing and all that type of stuff loaded into ChatGBT somehow? And like, hey, we need to reconfigure this and re… repopulate this into a PDF or something?

 

Speaker 1 | 28:16.661

Yeah, so actually this project was the creation of a web application, more of a UI that would sit on top of, at its most basic level, an Excel file at the beginning, that then it would just pull that information from the Excel file and then allow the user, in this case it would be a sales rep, to do that configuration and modularly interact with those different items.

And so the AI came into place more so in terms of the actual creation of that code and creation of it was a Python backend with a JavaScript HTML frontend. So the AI was not involved in the actual program after launch. It was a tool that was used to creatively create that project.

 

Speaker 0 | 29:03.215

I have a 75% idea of what you’re talking about and idea around it. And it’s pretty cool.

 

Speaker 1 | 29:09.379

I was very impressed. I was very pleased with the results. Yeah.

 

Speaker 0 | 29:14.501

This is, this is, you have a very unique situation going on. I want to applaud you. So the fact that since, I mean, anytime that you can get sales to, to, to want to be impressed by it, is that right? I’m getting this right. You mean anytime sales is saying, I really just, I really want it to just be impressed with me. That’s like a super win.

That’s like, I mean. really high up in my book because last time i checked um sales was throwing you know laptops out their car when they’re in a in a fit of rage and calling the help desk and saying hey i need you i need a new laptop this one’s broken these are real stories if we go to all the real stories

no for real like i don’t how often and you’re too young i mean i guess maybe not but i and i can guarantee you there’s a bunch of people on this on this call that, or on this call, listening to this show that sales doesn’t know the name of the IT people in the IT department.

 

Speaker 1 | 30:17.853

Wow.

 

Speaker 0 | 30:19.434

You’re surprised by that? I mean, they don’t even know their name. I’m serious. We’ve got people that are like the… I mean, there’s people out there that relate with this, the, the CEO or C levels walk by, walk by, you know, it offices, they don’t even know their name. That’s a problem. So you’re not very, um, I mean, I want to congratulate you.

Like, seriously, I don’t, I don’t know what you’re doing. I don’t know what the, I don’t know what it is. Maybe it’s just the fact that, um, we’re, we’re coming, we’re coming to the age where, um, everyone knows that, um, nothing gets done without. IT touching every aspect of the business.

 

Speaker 1 | 30:58.561

Absolutely. And I think that’s an understanding that has existed and perhaps even predated my position at the company I work for, is that real deep understanding that IT is now absolutely critical to a lot of these projects, almost all of these projects. And a lot of times that may be more of a precursor capacity, but that is just as critical and just as crucial to the success of any of these projects. Absolutely.

 

Speaker 0 | 31:26.340

What would you think is the one skill IT leaders need to stay relevant in the next five years?

 

Speaker 1 | 31:30.282

I would say it’s adaptability. I would say it’s not getting too entrenched in a certain mindset or a certain way of doing or thinking. I think always being open to that new direction and always be open-minded about what’s to come. I think that that’s something incredibly crucial. I couldn’t necessarily speak to that not existing.

I would hope that exists. However, I find that to be incredibly important. It’s just that base level of open-mindedness. And then also that combination of that IT at the end of the day is also a very creative facet of any business.

And it’s not so locked in. While there’s a lot of analytical components and a lot of more writing code and things that aren’t necessarily at the face, they don’t maybe seem as creative. I find those to be incredibly creative spaces where if you have that creativity and that mindset, I think that that is a lot more effective. And I would say, perhaps even I would say that an entrepreneurial mindset is also very crucial to IT leaders.

 

Speaker 0 | 32:30.643

Have you ever experienced burnout?

 

Speaker 1 | 32:32.243

Sure. I would say, yeah, I would say anybody would be lying if they said they hadn’t at some stage.

 

Speaker 0 | 32:39.046

What’s the best way to handle it?

 

Speaker 1 | 32:40.387

I would say the best way to handle it, that’s maybe going to, my answer may not be the most broadly applicable. But for me, at least, it’s really getting into, I experienced. burnout when a project or something I’ve been working on doesn’t seem to make progress or seems to be overloaded without there being an actual end goal that makes a lot of sense in mind.

And so I find taking some time to work on a project that really has a very definitive outcome, something that does have value and something that you can measure the progress, I think that’s very effective to combating at least my burnout.

 

Speaker 0 | 33:15.890

So the never-ending story is… … Do you remember that? You don’t remember that movie. That movie came out before you were born. But have you ever seen The NeverEnding Story?

 

Speaker 1 | 33:24.611

I have not, no.

 

Speaker 0 | 33:25.832

Okay. Have you ever heard of The Song That Never Ends? It’s the song that never ends. It goes on and on and on, my friend. It’s the song that never ends and it just keeps going on and on. It’s like my kids want to sing it in the car when they really want to drive you nuts. So what you’re saying is The NeverEnding Story project is a bad project.

We must find an end to the never ending story or the song that never ends. Maybe regroup. So if you’re stuck in that, then what, and there’s kind of this minutia, you’re stuck in the minutia of no ending and burnout, then what do you do? Regroup and find a goal and be like, Hey guys, what’s the, what is the, what is the end in mind here?

What is the goal? I mean, what is it? Is it exactly anyone else? Is it, Hey, give it to the HR sales guy so he can put an AI model to it and forget about it. What is it?

 

Speaker 1 | 34:13.939

I would say, yeah, I think that. But part of that entrepreneurial mindset is that sometimes you have to acknowledge when perhaps a project is no longer fruitful or does not make sense anymore with its initial goals or scope in mind. And I think being open and adaptive to pivot away, perhaps even completely from a project, approaching it completely new and from a different perspective. One example I can give is I’ve spent a lot of time working on an effective AI-based forecasting model for our sales side.

And that has been probably a six to eight month project that has yielded some results, but has really been kind of that grind that really does quickly in my mind lead to burnout. And so for me, what’s been effective is to, I think it’s maybe been three or four times, essentially restarting completely,

approaching it from a completely different launching point and a different perspective entirely. And I think that can really do a lot to combat that burnout and that cyclic feeling. because then it allows you to think creatively again, think freely again.

And then oftentimes, I’ve also found that then new developments or new options have even presented themselves in that timeframe that weren’t necessarily previously available.

 

Speaker 0 | 35:30.376

Blow it up.

 

Speaker 1 | 35:31.276

Exactly.

 

Speaker 0 | 35:33.258

Okay. That was the burnout question. Have you ever dealt with a vendor that has over-promised and under-delivered?

 

Speaker 1 | 35:41.565

That’s a good question. I would say definitely, actually. I’d say one clear example comes to mind, and this was at the beginning of creating our security infrastructure. We really didn’t have much in place at all when I first started. passwords and important information was shared via an Excel file that was being emailed around.

And so the first step is we thought, okay, let’s not maybe necessarily piecemeal this out completely. Let’s get a company that can give us that all-in-one experience that will really just take care of us and acknowledging that that may cost a little bit more, but it’s going to give us that peace of mind and that simplicity. And I found that… that that was really not the case.

 

Speaker 0 | 36:29.277

And there was a lot of different… Like a security as a service, kind of like managed service provider approach thing. Okay.

 

Speaker 1 | 36:36.982

Absolutely.

 

Speaker 0 | 36:38.043

And what happened? Dying to know. Well,

 

Speaker 1 | 36:42.766

yeah, no. So we very quickly off-boarded from them because we could quickly see that there was not a lot of value that was actually being added. They were more so just aggregating different solutions that existed. And then presenting those as a package, which can be appealing, I suppose,

if perhaps that’s the perfect combination that just so happens to click for your organization. However, I would venture to say that that is going to be more likely not the case than it is the case. And so that gave us some very valuable experience in jumping off points.

And then we decided to just put our solutions together individually and building the best security stack that worked for our organization without being limited to one. one grouping or one kind of package deal.

 

Speaker 0 | 37:28.664

Top five favorite security vendors. And we’re going to make them all pay us money for this little piece. Top five security products or vendors.

 

Speaker 1 | 37:41.288

Yeah. Calling out a few, not necessarily ones that we utilize, but I would say CrowdStrike is fantastic. Their offerings are really, really great. And they have quite a, just a breadth and depth to what they offer.

 

Speaker 0 | 37:53.771

What do you recommend for CrowdStrike? The CrowdStrike strike?

 

Speaker 1 | 37:57.057

I was, and that’s why I say not necessarily ones that we use. But outside of that, one that I found…

 

Speaker 0 | 38:04.582

I’m just wondering why you say that, because a lot of people are like, oh, they handle… I mean, there’s reasons why people would say CrowdStrike. They would say CrowdStrike because, hey, they dealt with this, whatever. Other people would say, how could they have not pushed that code out properly through the proper, I don’t know, operational…

 

Speaker 1 | 38:23.060

uh procedures and roll out a piece of code that was going to shut down um the world right i would say i’m definitely have one foot in both of those camps um but i would say that their their resilience and that ability to get through those those tough times and come out with a good solution in the end i think that that speaks volumes um as

to that company as i i can understand that there will there will not necessarily always but there is a high likelihood especially when you’re at the top of that that particular field,

but then you will have these stumbling points. You will have these things that don’t come out and aren’t necessarily fully ready or have these kind of issues and errors within them. However, I find it a little bit difficult to then discredit all of the other value that they do provide and really the incredible solutions that they do have.

 

Speaker 0 | 39:11.400

Number two.

 

Speaker 1 | 39:12.321

Yeah. Number two, I would say is AirGap. It’s a very, very creative network solution. One that I think really solves a problem that I haven’t seen others solve in the same way. And just they really deliver a very polished, polished product that is just, I would say, almost bar none to the competition in that particular space. It is a little bit more of a niche product, but I think it is incredibly effective.

 

Speaker 0 | 39:39.152

What is the problem they solve?

 

Speaker 1 | 39:41.473

Yeah, it would be that propagation kind of horizontally and vertically. if we were looking at some kind of diagram. But essentially having all network devices be isolated and capsulated. So if you, for example, have a ransomware attack, that’s a good example, then it wouldn’t be able to go to and infect all of the computers in that network. It would be able to be locked in and isolated to one, and then you can very cleanly and effectively manage that damage control.

 

Speaker 0 | 40:15.172

It’s like the submarine movies where the water’s coming in and we’re just like closing the doors so the water can’t go into the air. Only one.

 

Speaker 1 | 40:21.135

That’s exactly right.

 

Speaker 0 | 40:23.156

Next one.

 

Speaker 1 | 40:24.577

The next one I would say is going to be Titan HQ. They have quite a few different products, but we’ve leveraged a few of them in the past, and they have just exceptional customer service. And I think one of the really important factors is going to be that customer service, but then also that integration and onboarding.

I think that’s a challenge that a lot of IT security-related vendors face, where that process is just absolutely miserable and grueling, and then it really leads to an ineffective implementation.

potentially of those products, which in my opinion, immediately negates a lot of the value that they could potentially provide. So I think having a streamlined process that’s tailored towards a broader audience is really just a far more effective approach. And they have just been exceptional under those two fronts. And not to mention the product itself is also fantastic.

 

Speaker 0 | 41:16.348

Man, I should just be the guy that just does testimonials for other companies. All right. I should be like, what are the worst ones? Okay. Give me two more. You got two more?

 

Speaker 1 | 41:25.988

Yeah, I would say another one is going to be know before. They’re more on the phishing and user training side.

 

Speaker 0 | 41:34.170

Or I would say the most popular. I would say they’re the most popular of the email phishing and security training and don’t click on that, guys.

 

Speaker 1 | 41:43.872

Right. And I think that that’s a well-deserved position. And I would say after looking at and exploring some of these other alternatives on the market, I think one of the biggest challenges when it comes to training is kind of…

 

Speaker 0 | 41:55.516

making that interesting making it something that people actually will watch and sit through gotta fill it with memes you can’t have it be like a stick figure boring right you just can’t do that you gotta be fun exactly i gotta have to be crazy you gotta throw in like the jurassic park guy here and there you gotta throw in some stuff another

movie before your time and they have that’s best they have incredible you weren’t even around for jurassic park one i’ve read it but i know but it’s the greatest it meme It’s my favorite IT meme of all time.

Expaired no expenses. Hired one IT guy. You know what I mean? Like, you know, is that right? Is my English working today? It’s been a long day. Spared no expense. Hires one IT. And that’s why the dinosaurs escaped. Okay. Okay, no before last one.

 

Speaker 1 | 42:46.439

Yeah, last one I would say would be a PAM solution. called Secret Server. That’s one I think is just very effective. It’s well-designed. They’ve gone through a few acquisitions and improvements along the time, the lifecycle that we’ve had them. However, all of those have actually proven to be effective and beneficial to the end user,

which is oftentimes something that doesn’t necessarily happen, is that those acquisitions might be better for the company, but they may have a negative impact on those bottom line user base.

But they’ve had a really effective transition and their product is just very good to use. I think there’s not a lot more to say except for just a very well-executed product.

 

Speaker 0 | 43:31.526

Okay, so what company did you see take over another company where the end users suffered? I can think of a big one right now, but can you think of any?

 

Speaker 1 | 43:40.192

Oh boy, I don’t think I’ve experienced any personally, at least not in the IT space.

 

Speaker 0 | 43:49.578

I can think of one that begins with D. B and I know a lot of people know what I’m talking about. It begins with B and it ends with a com, but hopefully I don’t. And I’m talking about BurgerCom. It’s been a pleasure, actually. Very, very enlightening. It’s been a pleasure having you on the show. Words of advice or anything. How do you scale up so fast? How do you get to level? I mean, what is it?

 

Speaker 1 | 44:17.454

I would say it’s really, you know, finding you. finding a good company and not being afraid to maybe shop around a little bit and breaking away.

 

Speaker 0 | 44:28.739

You’re a smart person. Yeah.

 

Speaker 1 | 44:29.399

And I think breaking away from that approach, I think that was ingrained, at least one that I was ingrained with a little bit in college, which is that in an IT professional world, you should be jumping ships every one to two years or something like that. I think that that is something that is not really necessarily going to be as effective.

I think it is. It absolutely has to happen sometimes. And there are always going to be times where that is the best move. But I think it’s really finding a good company that is going to have that longevity and is going to not necessarily hold you back in that development and allow you to really expand your knowledge base, get exposure to a lot of different areas. I think that is just one of the most important catalysts to really expanding and progressing in your career.

 

Speaker 0 | 45:14.361

That is probably one of the best pieces of advice. And I only say that because I know it personally. You have to pick. You can’t just, you need to pick where you want to work and where you fit in or you’re going to be miserable. Or you’re just going to pick a loser and you might be miserable, you might be broke, you might just not be successful there.

The choices that you make of where you work are very, very important. So that’s actually an outstanding piece of advice. Looking at your past though, it probably helps to be a philosophy minor, I guess, when it comes to these things.

And you have a BS in commuting. computer science, how much did computer science actually help you in your role? Because I ask a lot of people this and it’s got so much like, you know, it’s like philosophy, but you know, which is kind of like interesting that you’re a minor in philosophy. So computer science and actual real life work, it help or not?

 

Speaker 1 | 46:10.242

For me, it did. I think that you can definitely get there without that formalized degree. I think there’s just so many fantastic resources that exist out there to get that knowledge base and that kind of those basic tools. And that’s how it essentially described that is it gave me that launching point to understand more essentially what I don’t understand and then allow me to go after those in more depth.

And then just for myself personally, I had no exposure or experience with programming whatsoever prior to my time at the university.

So having that baseline knowledge is something I use on a very regular basis. And I have to admit that may be something I kind of forced to use. make sure is being used because I think that’s an important skill to not get rusty.

 

Speaker 0 | 46:56.358

Noah, thank you so much for being on Dissecting Popular IT Nerds. It has been a pleasure, my friend.

 

Speaker 1 | 47:02.244

Thank you so much. I appreciate your time.

 

350- Practical Security Layering Techniques, Done Right by Noah Mechnig-Giordano

Speaker 0 | 00:00.800

Everyone out there listening to Dissecting Popular IT Nerds, this is Phil Howard, your host, and we’re speaking with Noah. I do not want to butcher your last name. I’m going to try Meshnik Giordano.

 

Speaker 1 | 00:13.065

That is very close. Yeah, Meshnik Giordano.

 

Speaker 0 | 00:15.706

Very solid. Okay. That could have been really bad for me there. So first of all, man, talk to me, because chances are you didn’t grow up in IT using floppy disks. It’s just a…

 

Speaker 1 | 00:28.532

it’s just a hunch man how’d you get started in it yeah so i um being 26 year old uh years old that is a very accurate statement i did not grow up with floppy disks um i got started now man i’m telling you you missed out but anyways go ahead i got started with honestly a love for video games and then a severely lacking skill in math and then as i went to college i decided that You know,

that’s something I should explore, something I’m weak in instead of something that comes more naturally to me. And then from there, that’s really just where I fell in love with it. And I think I got in at the right time because now everything just seems to be revolving around IT.

 

Speaker 0 | 01:09.070

Wow, so you’re one of those people trying to fix a weakness. I’m one of those too. I was terrible, terrible at writing in English and all that stuff. I was a creative writing major. Ended up in IT, kind of. Okay, so this will be fun then. What was your very first video game recollection of any video game that you ever remember playing? What was the very first one? We’re going to compare.

 

Speaker 1 | 01:32.269

All right. That’s a great one. I would say a game called Halo 3. That was kind of a transcendent experience for me at the time.

 

Speaker 0 | 01:42.895

Yes. Yes, it was. I don’t know. What would the word be for me? More like not transcendent. It would be like, let’s just put it this way. The very first video game that I remember playing off the top of my head right now, Pong.

 

Speaker 1 | 01:55.810

Okay, yep.

 

Speaker 0 | 01:58.891

Pong. Two sticks. Two white sticks and a white ball that was really a square. It’s really a square. I mean, the difference. Just think. Halo 3. That was, probably was even already a father at that time and beyond my video game playing days. Even though we have a PlayStation 5 now. And I’ve. kind of tried to get back into it. Soccer and hockey and let’s see,

I don’t know, whatever, Gran Turismo. But that lasted for a little bit of time. And then I realized I have no time.

 

Speaker 1 | 02:30.065

So absolutely. Yeah.

 

Speaker 0 | 02:31.966

Okay. So trending topics, things that I would really love to get your thoughts on. And one of them would be, how do you ensure upper management is not fearful of the. How do you convince upper management in the importance of security without using fear as a tactic?

 

Speaker 1 | 02:55.929

Yeah, no, I think that’s a great question. I’d say my experience was a little bit unique. I kind of started out in the security realm with a lot of upper management buy-in.

So there was really not a lot of resistance that I faced there. But I would say really just having the facts, having the data to support what that’s really going to do for the company and how important that really has become.

And that’s something you really can’t compromise on these days, even in a midsize company, even in a company where you may feel we might not be a subject for attack or a target specifically. It’s just become an absolute vital part of, I would say, every IT stack.

So I didn’t face a lot of resistance, but really to push that through and to really expand that infrastructure out, it was really just a matter of demonstration and showing that potential.

 

Speaker 0 | 03:43.770

And what is, what are your, I don’t know, what are you… What are your security layering techniques?

 

Speaker 1 | 03:51.114

Yeah, absolutely. So there’s a lot of different acronyms, but we followed the MITRE attack chain. I believe it’s called the kill chain very closely.

And then we also really structured it around building out from mission critical assets as that was one of the primary focuses for at least our company and organization was making sure that those mission critical assets are protected so that production can keep running and the entire business can keep running. So then as that as a core,

just expanding out to every facet that could potentially translate or reach our mission critical assets.

That was the first avenue. And then from there, it was really a very consorted and focused effort on the actual users that are going to be interacting with those security layers, making sure that they’re knowledgeable and making sure that they have that kind of training themselves.

 

Speaker 0 | 04:39.410

Okay, if you were in a room with, I don’t know, just the rest of your colleagues or something like that, no one in the outside world was… really allowed in, what would you want to ask them?

 

Speaker 1 | 04:49.392

In regards to security?

 

Speaker 0 | 04:51.014

Yeah, I’m just curious. Like, is there something that you would ask or something that you would offer up? I’m just, people want to talk about security layering techniques, so. I’m just curious. I mean, or how about this would be better if they were to ask you, you know, how do I better implement security layering techniques?

What would your advice be to them?

 

Speaker 1 | 05:08.495

Yeah, I would say there’s a lot of simple pieces that are still I’m seeing being overlooked. One of the most basic of those is just being passwords, right? Just making sure not to reuse your passwords, making sure to have different passwords for different functions.

I’ve seen that time and time again, where, you know, people really easily fall into that cadence of just having one password that they use for everything.

And I find that to just be a very easy starting point. And then outside of that, it’s really just a mindset as to how you interact with the internet,

as well as how you interact with any of the systems you may have at your company. So not going to malicious websites and just practicing kind of common sense knowledge as to how to interact with potentially threatening or potentially malicious environments.

And I think a lot of it really does come down to just common sense and having a few basic tools at your disposal to recognize and to check a few things that may flag some suspicion.

 

Speaker 0 | 06:03.005

Favorite tools? What are they?

 

Speaker 1 | 06:04.865

I’m a big fan of, I forget the name off the top of my head, but one of the great tools is just being able to input, for example, an email address you may feel suspicious of, and then just being able to trace through and see the origins and the creation of that email address. That’s proven to be exceptionally useful just on that. side alone.

And then also having some tools in place to just analyze your passwords and their strength, because that’s always going to be an ever-evolving landscape.

And as computing power increases, what you may have previously thought to be an ironclad, bulletproof password may no longer be as secure as you once thought.

 

Speaker 0 | 06:42.758

If you had a security one-liner, a security one-liner truth, what would your security one-liner truth be?

 

Speaker 1 | 06:49.364

Ooh, that’s a good question. I would say it’s to always be vigilant and aware and cautious. I think really with those three principles there, you’re able to really overcome a tremendous amount of risk out there just from a user potential.

 

Speaker 0 | 07:03.538

Okay. And if you were to tell your users this security one-liner truth, what would it be? Be paranoid. You know what I mean? What would your one-liner be? If they’re like, he’s always saying this about security. What is that one-liner security truth?

 

Speaker 1 | 07:21.654

I do like being paranoid. That’s a good one to an extent. I think that that is a very valuable mindset to have, especially in this landscape, as it is just always going to be changing. It’s something that’s very hard to pin down and have a very secure understanding at a stagnant position.

And then you have to always be learning and adapting what that looks like. So I think be paranoid may encapsulate that pretty well.

 

Speaker 0 | 07:44.492

Are you one of the few that is blessed with, it doesn’t happen that often. It doesn’t happen that often, but are you one of the few that gets blessed with every now and then someone trying to feed you a heavy dose of AI anything?

 

Speaker 1 | 07:59.187

Oh, absolutely. It’s very rare. Absolutely very rare. But no, I do feel that almost everybody has an AI something, AI solution that they’re looking to sell or looking to implement 100%.

 

Speaker 0 | 08:13.331

So there’s a lot of questions that can revolve around the AI thing. And I guess one of them would be… Have you run into any very practical AI use cases that are real and that you’ve actually implemented versus some other layer of AI hype that we all find ourselves in?

 

Speaker 1 | 08:37.002

Yeah, that’s a great question. I would say that there’s certainly a few that I found a lot of value and benefit in. However, I will say that those are solutions that I created myself and they’re things that I use myself.

Because I think that a lot of it really comes down to how those solutions are being implemented and where that responsibility of usage is kind of placed.

And I think too often that is not really placed in the control of the users or they don’t have that understanding to interact with these tools effectively in a way that’s actually going to be

beneficial in that use case, especially when looking at the long run. So a good example is I’ve developed kind of an offline… AI model to write emails, or I would say more so to edit emails, because I think that that’s a very easy trap to fall into. If you just type an AI prompt, hey, write this email for me, et cetera, and then it just spits it out.

I think a lot is lost there, but I think that it is very valuable as a launching point and jumping point to facilitate creativity and critical thinking when used correctly. But I think that a lot of the solutions out there, they perhaps try to take too much out of the hands of the user.

And then you lose a little bit of that creative spark and critical thinking.

 

Speaker 0 | 09:52.640

Yes. Which kind of leads to how can Well, let me ask it this way. Does your leadership ever come to you and ask you about, what should we be doing with AI? Or what should we be doing here? Or do they ever come to you and say, hey, what do you think of this? Or let’s implement this. Or I saw this.

 

Speaker 1 | 10:12.799

Absolutely. Yeah, that’s definitely been a common trend where there’s been a few solutions out there that leadership has felt and other team members have felt that would be beneficial to implement. My response to date has typically always been no for those, but that wouldn’t be a recommendation.

So we actually have not leveraged or implemented any external or third-party AI solutions. We’ve kept that completely in-house on all that development internal. And the primary reason behind that being security, as well as the actual usage of those solutions.

 

Speaker 0 | 10:47.804

Okay, great. So, okay, so here’s the big one. How can IT leaders… convince executives that AI is an enabler and not a replacement for workforce or other tasks? Might be a task, might be a replacement for a task name, but how is it an enabler, not a replacement? And do you think that that is a fear?

Do you think there’s a lot of IT leaders out there or people that are fearful of their jobs or worried about how executive management or people may think that AI is taking over and going to replace things?

 

Speaker 1 | 11:21.333

Absolutely. I think there’s definitely a certain level of fear, but I think that that fear is quickly dissuaded once you really start interacting with these models and looking at them. I think you can very quickly see that we’re not that close, perhaps, to a point where it can start really replacing that top-level creative decision-making.

And I think, to your point, it is effective in automating and reducing manual tasks. However, the way I see that is just an opportunity. I think that then just allows those people in those positions who may have a portion of their job automated,

it allows them to start thinking about that next level and taking their work to, you know, an entirely new place as they’re not having to spend that time worrying about these more mundane tasks that really can be very easily and effectively automated. And I would say to answer your first question about, you know, how to tackle some of those fear factors into…

kind of explain that to leadership. I think the most effective way is really just demonstrating results and showing how it can be effective and demonstrating how that hesitancy is not always as deeply founded as potentially it may initially seem to be. As a lot of these things, once you really start interacting with them,

and especially as once you start pulling back the curtain and not treating AI as kind of this black box that you can’t look into, I think then that’s when a lot of this fear… potentially or should dissipate.

 

Speaker 0 | 12:47.245

Explain the black box analogy a little bit.

 

Speaker 1 | 12:50.286

Yeah, no, I think that a lot of times an AI model is just seen as this magic little box and you put a prompt into and then you get a result out of and then you’re not actually able to see anything deeper into the process behind it or interact with how that model is arriving at the result. And I think once you start analyzing that, you can really see the actual potential and also the immediate limitations that exist currently.

 

Speaker 0 | 13:14.613

Okay, so let’s go a little bit deeper. Are you saying they’re not prompting correctly, so you may not get a deep enough answer? And if you understand where it’s pulling that data from, then you know that it might be lacking.

 

Speaker 1 | 13:27.183

Right. And once you really understand what the model is actually doing and where it’s sourcing the data, how it’s being trained, that’s when you can,

I think, have that deeper understanding of analyzing and looking at what those results are and then understanding them on a deeper level. and seeing maybe it goes into the wrong direction, but then you can understand why it did so. And even if it goes in the right direction, I think it’s also important to understand how it arrived there.

 

Speaker 0 | 13:52.272

Okay, enlighten us. Where is the model pulling this stuff from? Enlighten us. Tell us how it works. How do ones and zeros translate into pictures on the screen and do all of that? That’s really mind-blowing to begin with. But no, how is AI working?

 

Speaker 1 | 14:08.484

Well, I would say I’m far from a subject expert, but from my limited understanding,

 

Speaker 0 | 14:13.706

I would say it’s good that it’s limited. It’s good that it’s somewhere in between because you’re translating for executive management. Right. That things might think it’s like this. They might think it’s like Terminator 2. They might. You know what I mean? No, for real. For real. You know what I mean?

That’s kind of like where executives are. They can do everything. It’s the, you know, it’s like, you know, it’s the changing of the guard. It’s something like this. You know what I mean? But then it’s, it’s really not that it’s really somewhere in between.

 

Speaker 1 | 14:37.712

Right. I think the simplest way perhaps to think about it is it’s pulling everything essentially from the internet. So I think that that’s a good starting point is to look at and think about how you as a person personally in your life or even professionally interact with the internet and then how you naturally have these processes built in where you question,

you double check, if you find a source, you dig a little bit deeper to verify and validate that that is actually what you’re looking to inquire deeper about. And I think if you apply those same concepts, then you can quickly understand a little bit better about how AI may go into one direction or another,

have certain biases, as these biases and different directions are clearly visible just by interacting with the internet on a daily basis.

 

Speaker 0 | 15:21.749

What do you see, since you have the luxury of being young, younger, what leadership challenges have you faced? Where do you see the biggest leadership challenges from an IT leadership standpoint being these days?

 

Speaker 1 | 15:39.939

Yeah, I think one of the biggest challenges is definitely going to be adapting to a very, very evolving and fast-paced landscape in the IT world. I think it’s… exponentially increasing in pace in terms of what’s changing, what’s new, what’s coming to light and what can be used. And I don’t have the experience going back much further,

but I would say that we’re really in a stage where that exponential increase is a lot faster than perhaps we’ve ever seen before. So it can be potentially daunting and challenging to have an understanding and keep that understanding as to what’s really out there and what IT can do for you.

I think that if you gain that understanding at any certain point, then six months down the road, that can already potentially be out of date.

 

Speaker 0 | 16:25.466

Yes. What we thought, even I would say a year ago, if you look at how much even just the AI models have changed in a year, what we thought was going to be possible, at least I had a colleague the other day say, you know, I kind of thought that this AI model would be able to help us do this. And a year later, it’s a completely different world

and it’s not even. not even a thing anymore. That was just the AI example. And we were thinking about different prompts for, I don’t know, just different research purposes. And it’s, I don’t know, it’s just whatever evolved. It’s like, just, that’s not even a thing anymore. I don’t even know how to describe that. As far as being an IT leader, do you have a team underneath you?

 

Speaker 1 | 17:05.355

Yes, I do.

 

Speaker 0 | 17:06.236

How big is your team?

 

Speaker 1 | 17:07.737

Currently it’s, it’s relatively small, just two team members. But that is actually due to a recent right sizing that we do expect to expand this year. to hopefully around four or five.

 

Speaker 0 | 17:19.405

Do you find IT leadership to ever be lonely at the top?

 

Speaker 1 | 17:27.027

I think it certainly can be. I think it really depends on the specific company you work for and then that leadership structure above. In my case, it’s quite a specific example, but the president of my company was actually the previous director of IT. So there is a lot more of that understanding.

where I do have somebody that I’m able to bounce ideas off of and get a little bit more in depth with at the top of the leadership level. However, I am aware that that’s quite a unique scenario and would not really exist across many other businesses.

 

Speaker 0 | 18:01.759

Okay, so then how could we create that for other people? I guess what would be the unique? And I was speaking with a colleague earlier, Denise, and she said, we have to be able to teach leadership how to speak to IT, which is kind of interesting. But I would assume that your leadership already knows how to speak to IT because they were the previous IT. So what’s special about that?

 

Speaker 1 | 18:30.473

Yeah, I would say the depth and the understanding that exists and that communication is very fluid. And it allows us to really get into a lot more of a deeper understanding when it comes to new IT solutions, existing problems, and the landscape in general. And I would say that we could probably see that progression happen organically.

I think it does need to be accelerated going forward. But I think that as the next 10, 15 years, perhaps, that new wave of leaders come into those positions, I think that we’ll see a lot more of them have that IT fluency and are able to communicate better with… their IT leaders, respectively.

 

Speaker 0 | 19:08.545

What would your advice then be to the people that don’t have that fluency?

 

Speaker 1 | 19:13.086

I would say it’s very important to learn, to just have some experience. Go out there, try to interact, play around with some things. Even if it’s not initially successful, I think that that’s going to be a very valuable understanding. And I think one of the cores of that is having some kind of knowledge of programming and coding.

I think that’s something that is a little bit too rare. in the leadership side.

And I think that that does have a lot of translating benefits when you really get deeper into those conversations and understandings. You don’t kind of hit that wall where then you can’t explore any deeper once you get into the actual programmatic side of the house.

 

Speaker 0 | 19:50.698

So Trump should go take a Python class? No, but really, what would your advice be to the president when it comes to technology in America? Like, hey man, you need to know a little bit of coding.

 

Speaker 1 | 20:06.357

I think that would, I think that that would definitely have some merit and some value. I think, especially as we, we dive deeper, uh,

 

Speaker 0 | 20:12.721

all the show technology advice to president Trump.

 

Speaker 1 | 20:17.044

That’s a great,

 

Speaker 0 | 20:17.545

just because, you know, um, what’s the unwritten rule? What’s the unwritten rule of it leadership that no one talks about?

 

Speaker 1 | 20:25.158

I would say that’s a tough question. The unwritten rule.

 

Speaker 0 | 20:29.021

I don’t know the answer. I’m just asking it. I mean, I’m trying to fire off the hardest questions of all now. That one’s difficult. I mean, what is the unwritten rule of IT leadership that no one talks about? They’re afraid to talk about it. There’s something that IT leaders are afraid to talk about.

It’s the unwritten rule. I’m going to, I mean, I have a couple guesses. I think it has something to do with probably like vulnerability or something like that. What’s the… maybe something around empathy. I don’t know. Or what is it?

 

Speaker 1 | 20:56.479

Yeah. I mean, I would say-

 

Speaker 0 | 20:58.539

But I think they like to talk about empathy. I think leaders always love to talk about empathy. It’s just, I don’t know. What is it?

 

Speaker 1 | 21:04.901

Yeah. I would say, maybe I’m just thinking about the AI side still, but I would say the unwritten rule perhaps there is that that barrier to entry for AI products, AI commercialization has become incredibly, incredibly low. And it’s actually- very, very easy and simple to spin up a solution. It’s essentially just become a matter of API calls.

And then you’re already able to have a commercialized version of ChatGPT or anything of the sort to have any kind of specific use case or functionality. And I think that that needs to be potentially explored a little bit in a larger light, that that’s actually really not such a mystical and challenging piece to accomplish to develop those pieces in-house.

 

Speaker 0 | 21:50.254

So we should be developing our own apps that are essentially good prompting with a white label on top of it inside of Square.

 

Speaker 1 | 22:01.960

In a sense, yeah. And I think that that allows you to really tailor that. So I think what a lot of these products come down to is really the use case and the interaction with the model, as opposed to rather the actual model itself and the, you know, in quotes, thinking that’s occurring behind the scenes. And so I think having that ability to do that in-house allows you to create a lot more tailored and effective solutions and save a lot of money as well. Really make that more of an affordable endeavor.

 

Speaker 0 | 22:29.958

If you could bring the head mind of one thing that really knows how to prompt AI very, very well, then you could essentially clone yourself, kind of, by then putting that tool into the hands of other people that could use it. Is that kind of what you’re saying?

 

Speaker 1 | 22:47.994

In a sense, it can serve a little bit as a proxy. Absolutely. You can kind of spin up these different proxies and have that work very effectively to expand and have that interaction be not so limited to potentially one person or two people. I would say a good example of that is at my company that I work for, there’s only,

I think, two or three people that have knowledge of programming. And so that’s oftentimes something that is needed is to have some kind of programmatic logic developed, some kind of small platform or configurator, etc.

And I think that instead of having that be bottlenecked at those few people, it’s very simple to spin something up that then could deliver that same output and that same product and not necessarily have to go to those people specifically and especially not for that initial creation phase, ideation phase.

You can get really, even without any knowledge, I would say with an effective tool, you can get maybe 70 to 85% of the way there and then just have those specific team members, you know, finish that out or take that to a more polished state. I think that’s a really effective use case that I’ve seen.

 

Speaker 0 | 23:55.641

Wow. You’re asking a lot. This is great. No, for real. You’re asking a lot. If you’re basically asking, hey, Mr. End user, look, I know you don’t even know what coding is. I know you have no clue. But I want you to play around with ChatGPT. I want you to pull up this little thing. I want you to ask it to develop some code.

And then if you don’t know what it looks like, ask it to pull it up in this other video. It’s going to have you go to this website. It’s going to have you cut all this code. It’s going to put you on the website. And you’re going to see what the end result looks like. I want you to do all that first and then bring it to me. And then I’ll finish the job.

 

Speaker 1 | 24:23.405

And I’ve seen that actually at the company I work for very effectively take place. And I think that there are a lot of tools that can really also help guide that journey. And to make that not such an isolating potentially or daunting experience, I think with just the right questions even that then lead into that prompt or lead into what’s being generated,

you’re really able to make a lot of progress without having to have that internal knowledge. Now, sure, that internal knowledge is very helpful and allows you to operate a lot more independently.

However, at this stage, that I would say is most likely an unrealistic ask is to have the head of HR to have knowledge of Python or programming or something like that. However, I have seen with our head of HR that they’ve been able to just with chat GPT and a few pointers and a few directive questions, able to spin something up that is really quite effective.

And then it was just those last polishing steps of, you know, deploying it correctly, making it be able to, you know, function and the UI and UX pieces.

 

Speaker 0 | 25:22.679

Okay. All right. So here’s the use case we’ve all been looking for. You’re like the technology enabler. So your job shouldn’t even be whatever anymore. It’s a technology enabler. That’s really what the, is that what the modern IT person is going to be? The person that has more knowledge of networking and all this stuff.

And then they’re going to enable technology within the business. And that’s what’s going to save the IT guy from being fired or something. I don’t know, unless you go to school for becoming a technology enabler in the future.

Please, I’m dying to know what this use case is. Are you allowed to share? HR, AI, use case. It’s an AI technology leadership. I mean, it’s actually a pretty big deal. This is actually pretty mind-blowing. I don’t know how to title this yet, but I want to know what it is.

 

Speaker 1 | 26:10.179

Yeah. So I would say this is an interesting example because at our company, we wear a lot of different hats. This was actually kind of a cross-functional effort between HR and sales, interestingly enough. And so this was really a sales configuration tool that had some of those project planning and HR factors in place as well.

And that was something that this team member was able to spin up very, very effectively. I would say really maybe 85 or 90% of the way there, just through ChatGPT and a few kind of guiding questions and launching points.

But it enabled that team member to really think a lot more freely. and not immediately feel limited or hemmed in by technological constraints. They were able to just explore, I would say. And I think that’s really something that we need to see more of. And that’s a really effective relationship between HR, or I should say IT and these other departments.

 

Speaker 0 | 27:05.955

Okay. So what was the, I guess, the challenge or the problem to begin with?

 

Speaker 1 | 27:09.796

Yeah. The challenge to begin with was having a very clear understanding and giving our sales team something where they can… essentially walk into a sales call and be able to on the fly configure different proposals, different combinations of items, different configurations of those items, not having to essentially in those negotiations,

go back into our system, repopulate an entirely new proposal, but be able to on the fly adjust, make changes and additions. That was the real problem use case that was the genesis for this.

 

Speaker 0 | 27:42.502

And how was HR involved?

 

Speaker 1 | 27:45.644

I would say HR was involved just because that particular team member was wearing multiple hats. I wouldn’t say this was strictly an HR-related project in a sense. It was more so just something that they had been working on as they’re also leading on the project and strategic development side.

 

Speaker 0 | 28:03.236

Okay. And do we have all said SKUs and items and pricing and all that type of stuff loaded into ChatGBT somehow? And like, hey, we need to reconfigure this and re… repopulate this into a PDF or something?

 

Speaker 1 | 28:16.661

Yeah, so actually this project was the creation of a web application, more of a UI that would sit on top of, at its most basic level, an Excel file at the beginning, that then it would just pull that information from the Excel file and then allow the user, in this case it would be a sales rep, to do that configuration and modularly interact with those different items.

And so the AI came into place more so in terms of the actual creation of that code and creation of it was a Python backend with a JavaScript HTML frontend. So the AI was not involved in the actual program after launch. It was a tool that was used to creatively create that project.

 

Speaker 0 | 29:03.215

I have a 75% idea of what you’re talking about and idea around it. And it’s pretty cool.

 

Speaker 1 | 29:09.379

I was very impressed. I was very pleased with the results. Yeah.

 

Speaker 0 | 29:14.501

This is, this is, you have a very unique situation going on. I want to applaud you. So the fact that since, I mean, anytime that you can get sales to, to, to want to be impressed by it, is that right? I’m getting this right. You mean anytime sales is saying, I really just, I really want it to just be impressed with me. That’s like a super win.

That’s like, I mean. really high up in my book because last time i checked um sales was throwing you know laptops out their car when they’re in a in a fit of rage and calling the help desk and saying hey i need you i need a new laptop this one’s broken these are real stories if we go to all the real stories

no for real like i don’t how often and you’re too young i mean i guess maybe not but i and i can guarantee you there’s a bunch of people on this on this call that, or on this call, listening to this show that sales doesn’t know the name of the IT people in the IT department.

 

Speaker 1 | 30:17.853

Wow.

 

Speaker 0 | 30:19.434

You’re surprised by that? I mean, they don’t even know their name. I’m serious. We’ve got people that are like the… I mean, there’s people out there that relate with this, the, the CEO or C levels walk by, walk by, you know, it offices, they don’t even know their name. That’s a problem. So you’re not very, um, I mean, I want to congratulate you.

Like, seriously, I don’t, I don’t know what you’re doing. I don’t know what the, I don’t know what it is. Maybe it’s just the fact that, um, we’re, we’re coming, we’re coming to the age where, um, everyone knows that, um, nothing gets done without. IT touching every aspect of the business.

 

Speaker 1 | 30:58.561

Absolutely. And I think that’s an understanding that has existed and perhaps even predated my position at the company I work for, is that real deep understanding that IT is now absolutely critical to a lot of these projects, almost all of these projects. And a lot of times that may be more of a precursor capacity, but that is just as critical and just as crucial to the success of any of these projects. Absolutely.

 

Speaker 0 | 31:26.340

What would you think is the one skill IT leaders need to stay relevant in the next five years?

 

Speaker 1 | 31:30.282

I would say it’s adaptability. I would say it’s not getting too entrenched in a certain mindset or a certain way of doing or thinking. I think always being open to that new direction and always be open-minded about what’s to come. I think that that’s something incredibly crucial. I couldn’t necessarily speak to that not existing.

I would hope that exists. However, I find that to be incredibly important. It’s just that base level of open-mindedness. And then also that combination of that IT at the end of the day is also a very creative facet of any business.

And it’s not so locked in. While there’s a lot of analytical components and a lot of more writing code and things that aren’t necessarily at the face, they don’t maybe seem as creative. I find those to be incredibly creative spaces where if you have that creativity and that mindset, I think that that is a lot more effective. And I would say, perhaps even I would say that an entrepreneurial mindset is also very crucial to IT leaders.

 

Speaker 0 | 32:30.643

Have you ever experienced burnout?

 

Speaker 1 | 32:32.243

Sure. I would say, yeah, I would say anybody would be lying if they said they hadn’t at some stage.

 

Speaker 0 | 32:39.046

What’s the best way to handle it?

 

Speaker 1 | 32:40.387

I would say the best way to handle it, that’s maybe going to, my answer may not be the most broadly applicable. But for me, at least, it’s really getting into, I experienced. burnout when a project or something I’ve been working on doesn’t seem to make progress or seems to be overloaded without there being an actual end goal that makes a lot of sense in mind.

And so I find taking some time to work on a project that really has a very definitive outcome, something that does have value and something that you can measure the progress, I think that’s very effective to combating at least my burnout.

 

Speaker 0 | 33:15.890

So the never-ending story is… … Do you remember that? You don’t remember that movie. That movie came out before you were born. But have you ever seen The NeverEnding Story?

 

Speaker 1 | 33:24.611

I have not, no.

 

Speaker 0 | 33:25.832

Okay. Have you ever heard of The Song That Never Ends? It’s the song that never ends. It goes on and on and on, my friend. It’s the song that never ends and it just keeps going on and on. It’s like my kids want to sing it in the car when they really want to drive you nuts. So what you’re saying is The NeverEnding Story project is a bad project.

We must find an end to the never ending story or the song that never ends. Maybe regroup. So if you’re stuck in that, then what, and there’s kind of this minutia, you’re stuck in the minutia of no ending and burnout, then what do you do? Regroup and find a goal and be like, Hey guys, what’s the, what is the, what is the end in mind here?

What is the goal? I mean, what is it? Is it exactly anyone else? Is it, Hey, give it to the HR sales guy so he can put an AI model to it and forget about it. What is it?

 

Speaker 1 | 34:13.939

I would say, yeah, I think that. But part of that entrepreneurial mindset is that sometimes you have to acknowledge when perhaps a project is no longer fruitful or does not make sense anymore with its initial goals or scope in mind. And I think being open and adaptive to pivot away, perhaps even completely from a project, approaching it completely new and from a different perspective. One example I can give is I’ve spent a lot of time working on an effective AI-based forecasting model for our sales side.

And that has been probably a six to eight month project that has yielded some results, but has really been kind of that grind that really does quickly in my mind lead to burnout. And so for me, what’s been effective is to, I think it’s maybe been three or four times, essentially restarting completely,

approaching it from a completely different launching point and a different perspective entirely. And I think that can really do a lot to combat that burnout and that cyclic feeling. because then it allows you to think creatively again, think freely again.

And then oftentimes, I’ve also found that then new developments or new options have even presented themselves in that timeframe that weren’t necessarily previously available.

 

Speaker 0 | 35:30.376

Blow it up.

 

Speaker 1 | 35:31.276

Exactly.

 

Speaker 0 | 35:33.258

Okay. That was the burnout question. Have you ever dealt with a vendor that has over-promised and under-delivered?

 

Speaker 1 | 35:41.565

That’s a good question. I would say definitely, actually. I’d say one clear example comes to mind, and this was at the beginning of creating our security infrastructure. We really didn’t have much in place at all when I first started. passwords and important information was shared via an Excel file that was being emailed around.

And so the first step is we thought, okay, let’s not maybe necessarily piecemeal this out completely. Let’s get a company that can give us that all-in-one experience that will really just take care of us and acknowledging that that may cost a little bit more, but it’s going to give us that peace of mind and that simplicity. And I found that… that that was really not the case.

 

Speaker 0 | 36:29.277

And there was a lot of different… Like a security as a service, kind of like managed service provider approach thing. Okay.

 

Speaker 1 | 36:36.982

Absolutely.

 

Speaker 0 | 36:38.043

And what happened? Dying to know. Well,

 

Speaker 1 | 36:42.766

yeah, no. So we very quickly off-boarded from them because we could quickly see that there was not a lot of value that was actually being added. They were more so just aggregating different solutions that existed. And then presenting those as a package, which can be appealing, I suppose,

if perhaps that’s the perfect combination that just so happens to click for your organization. However, I would venture to say that that is going to be more likely not the case than it is the case. And so that gave us some very valuable experience in jumping off points.

And then we decided to just put our solutions together individually and building the best security stack that worked for our organization without being limited to one. one grouping or one kind of package deal.

 

Speaker 0 | 37:28.664

Top five favorite security vendors. And we’re going to make them all pay us money for this little piece. Top five security products or vendors.

 

Speaker 1 | 37:41.288

Yeah. Calling out a few, not necessarily ones that we utilize, but I would say CrowdStrike is fantastic. Their offerings are really, really great. And they have quite a, just a breadth and depth to what they offer.

 

Speaker 0 | 37:53.771

What do you recommend for CrowdStrike? The CrowdStrike strike?

 

Speaker 1 | 37:57.057

I was, and that’s why I say not necessarily ones that we use. But outside of that, one that I found…

 

Speaker 0 | 38:04.582

I’m just wondering why you say that, because a lot of people are like, oh, they handle… I mean, there’s reasons why people would say CrowdStrike. They would say CrowdStrike because, hey, they dealt with this, whatever. Other people would say, how could they have not pushed that code out properly through the proper, I don’t know, operational…

 

Speaker 1 | 38:23.060

uh procedures and roll out a piece of code that was going to shut down um the world right i would say i’m definitely have one foot in both of those camps um but i would say that their their resilience and that ability to get through those those tough times and come out with a good solution in the end i think that that speaks volumes um as

to that company as i i can understand that there will there will not necessarily always but there is a high likelihood especially when you’re at the top of that that particular field,

but then you will have these stumbling points. You will have these things that don’t come out and aren’t necessarily fully ready or have these kind of issues and errors within them. However, I find it a little bit difficult to then discredit all of the other value that they do provide and really the incredible solutions that they do have.

 

Speaker 0 | 39:11.400

Number two.

 

Speaker 1 | 39:12.321

Yeah. Number two, I would say is AirGap. It’s a very, very creative network solution. One that I think really solves a problem that I haven’t seen others solve in the same way. And just they really deliver a very polished, polished product that is just, I would say, almost bar none to the competition in that particular space. It is a little bit more of a niche product, but I think it is incredibly effective.

 

Speaker 0 | 39:39.152

What is the problem they solve?

 

Speaker 1 | 39:41.473

Yeah, it would be that propagation kind of horizontally and vertically. if we were looking at some kind of diagram. But essentially having all network devices be isolated and capsulated. So if you, for example, have a ransomware attack, that’s a good example, then it wouldn’t be able to go to and infect all of the computers in that network. It would be able to be locked in and isolated to one, and then you can very cleanly and effectively manage that damage control.

 

Speaker 0 | 40:15.172

It’s like the submarine movies where the water’s coming in and we’re just like closing the doors so the water can’t go into the air. Only one.

 

Speaker 1 | 40:21.135

That’s exactly right.

 

Speaker 0 | 40:23.156

Next one.

 

Speaker 1 | 40:24.577

The next one I would say is going to be Titan HQ. They have quite a few different products, but we’ve leveraged a few of them in the past, and they have just exceptional customer service. And I think one of the really important factors is going to be that customer service, but then also that integration and onboarding.

I think that’s a challenge that a lot of IT security-related vendors face, where that process is just absolutely miserable and grueling, and then it really leads to an ineffective implementation.

potentially of those products, which in my opinion, immediately negates a lot of the value that they could potentially provide. So I think having a streamlined process that’s tailored towards a broader audience is really just a far more effective approach. And they have just been exceptional under those two fronts. And not to mention the product itself is also fantastic.

 

Speaker 0 | 41:16.348

Man, I should just be the guy that just does testimonials for other companies. All right. I should be like, what are the worst ones? Okay. Give me two more. You got two more?

 

Speaker 1 | 41:25.988

Yeah, I would say another one is going to be know before. They’re more on the phishing and user training side.

 

Speaker 0 | 41:34.170

Or I would say the most popular. I would say they’re the most popular of the email phishing and security training and don’t click on that, guys.

 

Speaker 1 | 41:43.872

Right. And I think that that’s a well-deserved position. And I would say after looking at and exploring some of these other alternatives on the market, I think one of the biggest challenges when it comes to training is kind of…

 

Speaker 0 | 41:55.516

making that interesting making it something that people actually will watch and sit through gotta fill it with memes you can’t have it be like a stick figure boring right you just can’t do that you gotta be fun exactly i gotta have to be crazy you gotta throw in like the jurassic park guy here and there you gotta throw in some stuff another

movie before your time and they have that’s best they have incredible you weren’t even around for jurassic park one i’ve read it but i know but it’s the greatest it meme It’s my favorite IT meme of all time.

Expaired no expenses. Hired one IT guy. You know what I mean? Like, you know, is that right? Is my English working today? It’s been a long day. Spared no expense. Hires one IT. And that’s why the dinosaurs escaped. Okay. Okay, no before last one.

 

Speaker 1 | 42:46.439

Yeah, last one I would say would be a PAM solution. called Secret Server. That’s one I think is just very effective. It’s well-designed. They’ve gone through a few acquisitions and improvements along the time, the lifecycle that we’ve had them. However, all of those have actually proven to be effective and beneficial to the end user,

which is oftentimes something that doesn’t necessarily happen, is that those acquisitions might be better for the company, but they may have a negative impact on those bottom line user base.

But they’ve had a really effective transition and their product is just very good to use. I think there’s not a lot more to say except for just a very well-executed product.

 

Speaker 0 | 43:31.526

Okay, so what company did you see take over another company where the end users suffered? I can think of a big one right now, but can you think of any?

 

Speaker 1 | 43:40.192

Oh boy, I don’t think I’ve experienced any personally, at least not in the IT space.

 

Speaker 0 | 43:49.578

I can think of one that begins with D. B and I know a lot of people know what I’m talking about. It begins with B and it ends with a com, but hopefully I don’t. And I’m talking about BurgerCom. It’s been a pleasure, actually. Very, very enlightening. It’s been a pleasure having you on the show. Words of advice or anything. How do you scale up so fast? How do you get to level? I mean, what is it?

 

Speaker 1 | 44:17.454

I would say it’s really, you know, finding you. finding a good company and not being afraid to maybe shop around a little bit and breaking away.

 

Speaker 0 | 44:28.739

You’re a smart person. Yeah.

 

Speaker 1 | 44:29.399

And I think breaking away from that approach, I think that was ingrained, at least one that I was ingrained with a little bit in college, which is that in an IT professional world, you should be jumping ships every one to two years or something like that. I think that that is something that is not really necessarily going to be as effective.

I think it is. It absolutely has to happen sometimes. And there are always going to be times where that is the best move. But I think it’s really finding a good company that is going to have that longevity and is going to not necessarily hold you back in that development and allow you to really expand your knowledge base, get exposure to a lot of different areas. I think that is just one of the most important catalysts to really expanding and progressing in your career.

 

Speaker 0 | 45:14.361

That is probably one of the best pieces of advice. And I only say that because I know it personally. You have to pick. You can’t just, you need to pick where you want to work and where you fit in or you’re going to be miserable. Or you’re just going to pick a loser and you might be miserable, you might be broke, you might just not be successful there.

The choices that you make of where you work are very, very important. So that’s actually an outstanding piece of advice. Looking at your past though, it probably helps to be a philosophy minor, I guess, when it comes to these things.

And you have a BS in commuting. computer science, how much did computer science actually help you in your role? Because I ask a lot of people this and it’s got so much like, you know, it’s like philosophy, but you know, which is kind of like interesting that you’re a minor in philosophy. So computer science and actual real life work, it help or not?

 

Speaker 1 | 46:10.242

For me, it did. I think that you can definitely get there without that formalized degree. I think there’s just so many fantastic resources that exist out there to get that knowledge base and that kind of those basic tools. And that’s how it essentially described that is it gave me that launching point to understand more essentially what I don’t understand and then allow me to go after those in more depth.

And then just for myself personally, I had no exposure or experience with programming whatsoever prior to my time at the university.

So having that baseline knowledge is something I use on a very regular basis. And I have to admit that may be something I kind of forced to use. make sure is being used because I think that’s an important skill to not get rusty.

 

Speaker 0 | 46:56.358

Noah, thank you so much for being on Dissecting Popular IT Nerds. It has been a pleasure, my friend.

 

Speaker 1 | 47:02.244

Thank you so much. I appreciate your time.

 

Share This Episode On:

HOSTED BY PHIL HOWARD

Dissecting Popular IT Nerds Podcast

Weekly strategic insights from technology executives who understand your challenges

Are You The Nerd We're Looking For?

ATTENTION IT EXECUTIVES: Your advice and unique stories are invaluable to us. Help us by taking this quiz. You’ll gain recognition good for your career and you’ll contribute value to your fellow IT peers.

QR Code