I don't usually share who I am working for directly, especially while I work for them. What I do is…
Dave M. — Cyber Security Director
I don't usually share who I am working for directly, especially while I work for them.
What I do is sensitive and who I'm doing it for is sometimes VERY sensitive.
Having attackers prowling certain sites looking for who works in a target org is a real issue that I avoid.
Unless I need to be visible for the company I just don't add it on - unless its older / non-sensitive. I have enough listed to have a timeline and flavour of what I do and the level I do it at - as it's needed as an online CV - and yes I suffer for it a little professionally - but most of the most interesting work comes through a network of people who know me and how I can solve an issue for someone.
Does having a network where people are verified change that risk decision any?
Pondering that one myself - anyone else have thoughts on this?
3 reactions · 2 comments
Comments
Liam R.: Hi David, I think the bigger problem is that just about every company on the internet is gathering data about us and selling that data. Then we have companies like Palantir being given uncensored access to all of our NHS data. When it comes to clearance information can this expose you to bad elements? potentially yes. However, FIS already know everything about you anyway.
Dave M.: Oh yes I'm not trying to solve the general privacy issue - that ship has long sailed - but my individual clients and when I'm working for them - I tend to keep more private - so the lower level internet pond scum don't have an easy time tracking. Do I think when I worked for CNI that I wasn't trackable as working there - no but that's a different level of adversary - and briefing the execs on "if