Transcript
A (0:02)
You're listening to the Cyberwire Network powered by N2K.
B (0:11)
Think your certificate security is covered. By March 2026, TLS, certificate lifespans will be cut in half, meaning double today's renewals. And in 2029, certificates will expire every 47 days, demanding between 8 and 12 times the renewal volume. That's exponential complexity, operational workload and risk. Unless you modernize your strategy, Cyberark, proven in identity security, is your partner in certificate security. Cyberark simplifies lifecycle management with visibility, automation and control at scale. Master the 47 day shift with CyberArk Scan for vulnerabilities, streamline operations, scale Security visit cyberark.com 47day that's cyberark.com the numbers 47day.
A (1:15)
Hello, I am Sloan Minkus and I am a principal in PricewaterhouseCooper cyber risk and Regulatory Practice and I lead our Microsoft Cyber Alliance. I really didn't have any idea about what I wanted to be. It was more about what I wanted to do. So I've always had a fascination with math and solving problems. And I've had this almost nonlinear view even before I knew what nonlinear math was. And I can look back on it and see that my life I saw as variables and I was looking for ways to solve for them. And I could move forward if I solved for one variable. And maybe I needed to take a couple of steps back and resolve to move forward. But I always had this sense that I would be able to do something that would be around solving problems. Growing up, I actually had friends of all different sorts of I really enjoyed nerding out with my friends who are willing to hack their way onto the mainframe on our local university campus. But I was just as comfortable in the fact that I was quite athletic and I was an athlete. I found my way to connect with lots of different people. That was really important to me. And maybe it was just because I saw that, that there were so many different variables in life and I wasn't quite sure where I was headed. I have an experience where in high school, someone who was older than me that I had a crush on turned around during math class and he looked at me and he said, sloan, do you realize if you put 2% more effort in that you would be phenomenal at everything that you do? And it stuck with me because am I an overachiever? Yes, definitely. I go back to that story. I actually tell people that that are mentors or mentees of mine. So when I feel that perhaps, okay, I'm shutting down, I say, what is the 2%. But I actually have made that into this mantra and this person has no idea what an effect they had on my. I chose actually to extremely focus on going to the US Air Force Academy. I threw everything into making sure that not only did I get nominated, but that I got accepted. It's a two stage process for our service academies. And I did get into the Air Force Academy and I really thought that engineering was where I was going to land. There were theorems that you would follow and that was fun, but it was not as exciting as solving a problem for me. And then I learned about operations research, which was a combination of using math and using computer science and in some cases using economic modeling to create models that would solve complex problems. It fascinated me and I loved it. I really found a way to fine tune that intuitive problem solving skill or way of thinking that I had in college. I leaned in and I decided, even though it wasn't required, that I was going to take calc 3 and calc 4. And I had this beautiful, mind blowing, eye opening experience where I fell in love with calculus and all of a sudden intuitively understood calculus. Figuring out nonlinear math really spoke to me the way that I had been thinking most of my life. I could see on a sheet of paper and understand that there was actually a method to the madness, or perhaps not madness, but a method to my thinking. The challenge in the military discipline for me was that I never wanted to get it wrong. I actually had a very strong family relationship with serving in the military, and yet I didn't have a large familiarity with what it meant. So there was a huge learning curve for me in that respect. Now, having said that, I was one of five graduates and the only female who won a military award at graduation at the Academy. I was actually really lucky. And then I got one of six selected Air Force slots to go get my graduate degree in Management Information Systems. And I was able to do that while I was on active duty. So my first assignment as a first lieutenant in the Air Force, I found myself at Headquarters OSI, or Office of Special Investigations. Officially, I was head of the Configuration Management Branch for code that was being written for special agents. They, interestingly enough, had one of the longest running cybercrime or forensics investigative labs that had existed when I was there in the 90s. So I was exposed to Howard Schmidt, who was the civilian agent. And he became a legend in his own right. He became the first White House head of cybersecurity. He asked me several times to help him with his briefings when he was writing up cybersecurity incidents. I had clearance for it. And this is where I first started to get interested in cybersecurity. On transitioning out of the Air Force, I was briefly a contractor for the State Department in their cybersecurity lab. So I got to focus on this thing that I was so excited by and learned a lot in just a few short months. While I was there, Rice Waterhouse was doing a project. I was able to apply for cybersecurity position with them, and I have been there ever since. One of the things that I love about consulting is it's constantly changing environment day to day, being able to change the things that I'm focused on. But remaining in the realm of cybersecurity has been fascinating to me, and I've been able to do all of that. None of this would keep me as excited to stay there if it weren't for the people I'm working with, and I mean both my clients as well as the people that I'm working with. At PwC, I had a great mentor who taught me that putting things in buckets helps with perspective. Things are going to be challenges, and being able to put some perspective in that by putting it in the bucket, it's going to matter six weeks from now, matter six months from now. Because if it's going to matter six years from now, well, that's career changing. So spend a lot more time on that. But if it's not going to matter six days from now, we'll make amends with whatever that challenge is. Don't just brush it off, but make amends so that you have figured out a way around that challenge, or through that challenge, if you will. I have always been really passionate about women in cybersecurity. So when I joined PwC, interestingly enough, there were 10 of us hired at the same time, and actually half of us were women. In 1997, that was nearly unprecedented. Understanding that we need to support each other. We've grown, but it took us a decade to start to get our numbers up. Don't be afraid to explore cybersecurity, even if it's necessarily the thing that you studied for. I didn't study for it in college. I actually got to learn a lot about it on the job. The second bit of advice that I would give women who are not so interested, but they're intrigued by it is, go ahead, dig in, learn. There's so many great resources about learning what cybersecurity is all about. Don't let that be intimidating instead. Let that be inspiring.
![Sloane Menkes: What is the 2%? [Consultant] [Career Notes] - CyberWire Daily cover](/_next/image?url=https%3A%2F%2Fmegaphone.imgix.net%2Fpodcasts%2F684b2a68-9faa-11f0-95f2-c7a75a5e5828%2Fimage%2F910aaf148c5fdf3b9f89208a91f19df4.png%3Fixlib%3Drails-4.3.1%26max-w%3D3000%26max-h%3D3000%26fit%3Dcrop%26auto%3Dformat%2Ccompress&w=1920&q=75)