Rhonda Farrell
Contributions from Other Fields


Cybersecurity is a high growth field,
but an inexact science -an amalgamation, if you will, of
theories, principles, and
best practices pulled from the realms
of quality, risk management,
performance excellence, and change
management.
Explore how these bodies of
knowledge can be more effectively
intertwined to craft a solid roadmap
using a ‘value-add approach’ which
guides both your customer solutions
as well as your own career.
Takeaway:
Innovate and
create your own
Frameworks
Value-Add Defined


Increase of the ‘value’ to a party
purchasing a product or service
Value
 An amount, as of goods, services,
or money, considered to be a fair
and suitable equivalent for
something else; a fair price or
return.
 Worth in usefulness or importance
to the possessor; utility or merit.
 To determine or estimate the worth
or value of; appraise.
 To rate according to relative
estimate of worth or desirability;
evaluate.
Takeaway: Explore
& Find Your
“Sweet Spot”
Cybersecurity Value-Add Mechanisms

Portfolio Analysis

Risk Assessment

Cost Benefit Analysis

Return on Investment (ROI)

Return on Security Investment
(ROSI)
Takeaway: Invest
In Your Future(s)!
Unique Success Path

Use Similar Tools to Decide Strategically How
to Best Invest in Yourself?
 Premise: Market Yourself Like
a Service Provider would…
○ Career Interests
○ Promotions
○ Professional Group Selections
○ Longer Term Educational
Programs
○ Certification
○ Credentials / Certificates
Takeaway: Take Stock
and Be Bold …
You only LIVE once!
Amalgamation of Industry Best
Practices

Quality

Risk Management

Performance / Organizational
Excellence

Change Management
Quality
Quality Definitions

A distinctive attribute or characteristic
possessed by someone or something

The standard of something as measured
against other things of a similar kind; the
degree of excellence of something
Risk Management



Roots of cybersecurity
assessment activities
Integrates strongly
with threat
assessment & attack
patterns
Lifecycle
 SDLC
 S-SDLC
Takeaway: Take “Informed” Risks
Quality Tools

Defects
 Quality defects can also be security
findings (Sharpen Your Toolkit)

Statistical Analysis Methods







Cause & Effect Diagram
Check Sheet
Control Chart
Histogram
Pareto Chart
Scatter Diagram
Stratification
100
99.5
99
98.5
98
0
0.5
1
Performance Excellence
The Challenge

The term “performance excellence” refers to
an integrated approach to
organizational performance management
that results in:
 Delivery of ever-improving value to customers
and stakeholders, contributing to
organizational sustainability;
 Improvement of overall
organizational effectiveness and capabilities; and
 Organizational and personal learning.
Best of ‘All’ Worlds

Meld of Quality Management, Risk
Management, and Performance Excellence
results in “Organizational Excellence”
 To survive in today's competitive
environment, you need to excel. To
excel, a company needs to focus on
all parts of the organization,
optimizing the use and
effectiveness of all of its resources1.
Takeaway: Find the Niche
where you can be GREAT!
1.
www.qualitydigest.com/aug06/articles/05_article.shtml
Organizational Excellence - Baldrige
NIST (2015). Baldrige Excellence Framework 2015-2016, p. 1
Key Takeaways

Results Oriented

Holistic

Focus on Customer Satisfaction

Grounded in Core Principles / Values

Knowledge Driven
Change Management

An approach to
transitioning individuals, teams,
and organizations to a desired
future state

Focus on not only the WHAT but
also the HOW…
Change Management - Models

Kotter
 8 Step Change Model

Lewin
 Unfreeze, Change,
Refreeze

ADKAR
 Awareness, Desire,
Knowledge, Ability,
Reinforcement
Takeaway: Be the Change you want to see
occur in the World!
Change Management - Models

Stephen Covey – 7
Habits
 Be Proactive
 Begin With the End






in Mind
Put First Things
First
Think Win / Win
Seek To
Understand
Synergize
Sharpen the Saw
McKinsey 7S
Analysis Tools

SWOT Analysis

Force Field Analysis
Takeaway: You are Building a
Toolkit
Envision, Adapt, Succeed

Business Process
Re-engineering

Strategy

Restructuring
Takeaway: If You can Envision it, You can Achieve it!
Alignment to Achieve Excellence

Quality
Function
Deployment
Measuring Your Progress

Metrics & Measurements
 Enables alignment to
strategy, goals, and
objectives
 Shows real-time progress
 Sustains continuous
improvement efforts

Choose Wisely!
Takeaway: Aim High, but include
a Sold dose of Reality.
Power of Visualization

Balanced Score Cards

Dashboards
Takeaway: Excellence is an
Iterative Process … Be
Patient!
Cybersecurity Take-aways

Interweave Security across
the Lifecycle
 Proposals
 Requirements
 Lifecycle Activities
Build on Quality Programs
to build a stronger case
 Metrics & Measurements
Matter
 Make Results Visible to
keep IGNITING future
positive change efforts

Career Take-aways

Inventory
 Value-Add
Select Frameworks &
Change Models
 Envisioning
 Analyze

 Tool Implementation
 Score Cards or
Dashboard
Build Champions
 Track Performance

Questions

Questions

Comments

Feedback