← CyberWire Daily![Jennifer Walsmith: Pioneering and defining possible. [Cyber Solutions] [Career Notes] — CyberWire Daily cover](https://megaphone.imgix.net/podcasts/9db1190a-10a9-11f0-af03-a3a20eafb314/image/910aaf148c5fdf3b9f89208a91f19df4.png?ixlib=rails-4.3.1&max-w=3000&max-h=3000&fit=crop&auto=format,compress)
CyberWire Daily
Jennifer Walsmith: Pioneering and defining possible. [Cyber Solutions] [Career Notes]
00:09:24
Loading summary
Transcript4 lines
- [00:02]
A
You're listening to the Cyberwire Network powered by N2K.
- [00:14]
B
Are you frustrated with cyber risk scores backed by mysterious data, zero context and cloudy reasoning? Typical cyber ratings are ineffective and the true risk story is begging to be told. It's time to cut the bs. Black Kite believes in seeing the full picture with more than a score. One where companies have complete clarity in their third party cyber risk using reliable quantitative data. Make better decisions, reduce your uncertainty. Trust Black Kite.
- [00:56]
A
My name is Jennifer Wallsmith. I'm the Vice president for Cyber and Information Sol within Mission Systems. Northrop Grumman. I actually thought I wanted to be a vet when I grew up, but when I reflect, I really worked very closely with my father and he was a big part of my life. He was an electrical engineer and I helped him as his somewhat son outside of the house doing everything from rewiring, building, anything that he needed done, I learned in his shadow. He worked for NSA and ultimately I followed in his footsteps to nsa. Not exactly in the path that he wanted me to take, but ultimately he was a huge influence. When my siblings, who are both older than I, knew my father, he worked in a candy store according to him, and he had business cards and so forth. That's how secretive NSA was in the times that they were growing up. That gradually changed and I joined NSA in 1982. It still was not an openly acknowledged agency. In fact, it was no such agency. But in my journey they changed and they became an organization that was more transparent with the nation on what they were doing and their role. And it's one that I grew to understand from two lenses. I was one of only three public figures at NSA in my job as the senior acquisition executive for over 10 years. And so I had the opportunity to balance both of those equities and it was a fascinating journey. NSA actually came to my high school and I, unbeknownst to my parents, I took the battery testing that they would go out to the various local high schools and I scored very well and they offered me a job. My parents wanted me to go to college, but I was quite a challenging teenager and I said no, I'm going to work. I was hired as a data entry operator, but quickly was fortunate to actually work in the field of computer systems analyst. I quickly realized that this college degree was a very important thing. In parallel with starting at nsa, they convinced me to enroll at the community college as a night school student. And so I did both of those things. Ultimately, NSA supported me to finish my college career at NBC as a computer Science major. The agency had a rich history of supporting women. If you look at the Cryptologic Museum, you'll see a lot of history about women. Nonetheless, it was still challenging, and I really thought I would become an electrical engineer just like my father. But he saw women struggle. What he said was, why not try this new emerging field called computer science? And so you can be part of the group that pioneered this field. And that is ultimately what I did. I think it remained challenging in the 80s and even in the 90s when I became a senior executive at NSA, there weren't women senior executives that had children. While there were many seniors that had been successful, they had to give up their opportunity in motherhood. What I pioneered with those around me and a tremendous support network was that I could do both. I could be a mother with two children I was raising and yet still have a successful career and having the courage to say, no, I'm room parent today and I need to leave. But still meeting the responsibilities that I had by having others support me. It wasn't until much later, close to my retirement, I had so many women come to me and say, you showed me we could do this. And I didn't even realize it. And so that's very nostalgic for me because I didn't set forth to have that impact. It did take bravery and it did have a few arrows in my back, but I would say really, not that many. It was about making sure we served the mission, but also supported one another in having lives beyond the mission. So it was retirement, and I had the wonderful opportunity to join a company that had a lot of similar values to that which I had. And that was tremendous technical acumen, deep commitment to diversity, diversity of thought, diversity of ideas. When I think of the ideas that we set forth, such as we're pioneers, we define possible, we promote and inspire inclusion and diversity of thought. That's exactly what I hired on for. I run a business which we have a set of financial numbers that we have to achieve. But what I do more of is orchestrating and inspiring teams. The heart of my job is helping them define possible where they sometimes think they can't be bold, embrace failure, never stop learning. And we're all leaders. Whether it's your first day out of college, whether it's 10 years into your career, or whether it's one day before retirement, regardless of your job title, we are all leaders. That's what will help us keep our nation safe, especially in a field of cyber, where if we don't pioneer, if we don't continue to define possible. We will not be successful against our adversaries. That's my advice.
- [08:35]
C
What's the common denominator in security incidents? Escalations and lateral movement. When a privileged account is compromised, attackers can seize control of critical assets with bad directory hygiene and years of technical debt. Identity attack paths are easy targets for threat actors to exploit, but hard for defenders to detect. This poses risk in active directory, entra, id, and hybrid configurations. Identity leaders are reducing such risks with Attack Paths Path Management. You can learn how Attack path management is connecting identity and security teams while reducing risk with Bloodhound Enterprise powered by SpectreOps. Head to SpectreOps IO today to learn more. Spectre Ops See your attack paths the way adversaries do.