George Finney - Well Aware

This publication is designed to provide accurate and authoritative information in regard to the subject matter covered. It is sold with the understanding that the publisher and author are not engaged in rendering legal, accounting, or other professional services Nothing herein shall create an attorney-client relationship, and nothing herein shall constitute legal advice or a solicitation to offer legal advice If legal advice or other expert assistance is required, the services of a competent professional should be sought.

Published by Greenleaf Book Group Press

Austin, Texas

www.gbgpress.com

Copyright 2020 George Finney

All rights reserved.

Thank you for purchasing an authorized edition of this book and for complying with copyright law No part of this book may be reproduced, stored in a retrieval system, or transmitted by any means, electronic, mechanical, photocopying, recording, or otherwise, without written permission from the copyright holder.

Distributed by Greenleaf Book Group

For ordering information or special discounts for bulk purchases, please contact Greenleaf Book Group at PO Box 91869, Austin, TX 78709, 512.891.6100.

Design and composition by Greenleaf Book Group

Cover design by Greenleaf Book Group

Cover Image: iStockphoto/hjroy

Publishers Cataloging-in-Publication data is available.

Print ISBN: 978-1-62634-735-9

eBook ISBN: 978-1-62634-737-3

Audiobook ISBN: 978-1-62634-736-6

Part of the Tree Neutral program, which offsets the number of trees consumed in the production and printing of this book by taking proactive steps, such as planting trees in direct proportion to the number of trees used: www.treeneutral.com

Printed in the United States of America on acid-free paper

20 21 22 23 24 25 10 9 8 7 6 5 4 3 2 1

First Edition

Make fear a tailwind instead of a headwind.

Jimmy Iovine, cofounder, Interscope Records

C lose your eyes and think of the word cybersecurity. What do you visualize? Nine out of ten people I have asked to conduct this mind exercise have come back with something like I see a dark room with a number of computers with blinking screens, and someone in a hoodie or sometimes a mask, trying to scramble through some code as if stealing something! Its a compelling vision of a dark art that is practiced by someone that we refer to by various names: hacker, adversary, threat actor. Seldom do I come across someone who has a more positive vision. And this is the challenge that cybersecurity presents. It appears to be a very bleak and involved topic that only experts can understand and decipher, and we had better leave it to them. And it is this esoteric aspect and a painful absence of simplicity that have gotten us into this challenging circumstance, where we have fewer and fewer experts trying to address an overwhelming amount of challenges.

As the chairman and founder of Cyber Future Foundation (CFF), I have had the opportunity to meet and work with some remarkable leaders around the world. Several executives and prominent global leaders have personally expressed to me a desire to simplify cybersecurity so that they can engage the whole of a nation, enterprise, and society. As we work on the challenging mission of bridging the gap between global leaders and the technically astute and inclined cybersecurity industry and business, we still see cybersecurity challenges being confined to the cybersecurity experts and the industry.

We have to turn this on its head and make cybersecurity a problem that everyone can understand, comprehend, and engage in, not just because we want to get more experts on the subject but because security in cyberspace is everyones business and responsibility, and without harnessing this collective capacity, we cannot be successful in securing cyberspace, either as individual consumers or as citizens of a connected world, and definitely not as employees of a digital enterprise.

That describes exactly why we need this book by George Finney. Not only is it timely, but I believe it will be timeless in terms of being an objective and compact reference for those who need to understand cybersecurity and how they can make the changes they seek.

In over two decades of a career that has involved cybersecurity through different dimensions, George has been able to see the issues from various perspectives: as an end user, as a technology executive, as an educator, and in his current role as a chief information security officer of a sprawling enterprise.

I have known George for years now, and I have been impressed by his optimistic but realistic approach to issues. His approach to the most technical of challenges is not through the technology but through examining the expectations and outcomes, behavior and results. George has been a steady voice of reason and pragmatism toward addressing the issues of cybersecurity through objective analysis of situations and behaviors, rather than incidents and reactions.

While cybersecurity has its fair share of technological problems and jargons, George brings a very human and relatable approach to studying and learning the topic. Humans are creatures of habits, and it is in this power of habits that George sees the opportunity to advance our learning and engagement as workers, citizens, and consumers and to develop patterns of behaviors that will improve our security posture.

I believe as the reader goes through this book, they will be enlightened by how everyone can get engaged in cybersecurity by following the habits that George lays out. The concepts are supported by the brilliant recollection of anecdotes, events, and incidents, which makes it abundantly easier on the reader to embrace them. I believe through this book that the reader will become intimately familiar with their role in securing their journey, embrace security as a behavior, and be able to actively contribute in securing our digital life.

As a cybersecurity professional, as a business leader, and definitely as a parent, this book has been a validation of my thoughts. With Georges book as a reference, a lot of the work we are doing at CFFwhether the executive engagement at the Cyber Future Dialogue in Davos or the engagement of young cybersecurity professionals through the CFF Society of Mentorsbecomes a tad bit easier. Next time someone has a recollection of the bleak vision of cybersecurityof a teenager in a hoodie in their moms basement hacking away at networksa definite action is going to be referring them to the positive, uplifting, and engaging story of the Girl Scouts and their keen enthusiasm in earning cybersecurity merit badges.

The world we live in is becoming more connected and is rapidly changing to where we need to understand what ties it all together and how we can keep it safe and secure. George has done his part, and now it is up to us to take the lessons from this book and change our behavior. As we say at CFF, lets work to build a more trusted cyberspacethe much-needed help is here!

Valmiki Mukherjee
Chairman and Founder, Cyber Future Foundation
Chairman and Convener, Cyber Future Dialogue, Davos, Switzerland
Convener, Cyber 20 Engagement Group for G20 Heads of States
www.cyberfuturefoundation.org

I d like to tell you a story about an entrepreneur named Johann. Johann built an invention he thought would change the world. He convinced a venture capitalist (VC) to invest $100,000 in his business so he could create a prototype. With the funding secured, Johann hired employees and began to train his staff on how to use the invention.