Isolation in InfoSec by Stuart Barker

Stuart at High Table specialises in fin tech and financial services companies with over two decades of experience delivering legal and regulatory compliance for data. He specialises in getting and keeping companies compliant for data security - which usually means ISO 27001, PCI DSS, SOC 1 and SOC 2 certification and regulations like the FCA regulations for data security.

He started, built and successfully sold a cyber security business.

Now he advises companies and builds data security capability allowing them to meet the needs of their customers, the needs of their funders and the needs of the law. Usually in that order.

He is also a driver in addressing isolation, wellbeing and mental in business and building emotionally intelligent people networks. He's also a good friend of mine.

---

A massive problem in cyber security is isolation. The feeling of isolation and being alone.

It can impact on consultants and full time employees alike.

Isolation for consultants

Consultants by their nature are often on the road.

Like actors they appear popular, have lots of contacts, work in many companies but the truth is they don’t fit in anywhere.

It is hard to be a consultant.

The reality is that the company that pays your wages, rarely engages with you other than to ask "Why aren’t you working harder, earning more money, reviewing your utilisation?".

The companies that you work for you respect you and more often than not, like you but you are not one of them.

You spend a lot of time on the road, alone or working from home, alone.

It is easy to become isolated.

Isolation for full time employees

Full time employees are usually the only one in the company from an information security background.

They have no peer group to interact with and by the nature of the role, they are mostly hated and seen as stoppers of business.

It’s a bad rep but you are seen as the "computer says no" person. The "disabler of business".

You are expected to have all the answers across the vast domains of information security - which you don’t (and can’t).

And you have no one to turn to to ask.

Isolation in role becomes the norm and then you leave hoping the grass is greener.

The answer

There is no one answer to tackle isolation, and I don't have the answer.

I have an answer, and here are my top tips:

• Use social media in a social way. Screw those that dictate rules like "Linkedin isn’t Facebook".

• Find your tribe and engage with them. It is a social network so be sociable.

• Take up a sport related hobby outside work. For me, it's kick-boxing, but find something that drives you with goals, progression and a reason to attend on a regular basis. The mental and physical benefits alone are worth it,and you will find friendships in circles you normally wouldn’t consider. It is liberating.

• Don’t work all hours God sends. This is hard, and one I haven’t mastered, but there has to be an "off" switch. It is easy when feeling isolated to make work fill time and plug the void. But you are missing out on life and what life has to offer.

• Switch off when you can.

---

We are committed to promoting good mental health in I.T and Cybersecurity in all its forms, so if you have any tips, tricks or just stories of how you've managed to keep a clear head in this industry - don't hesitate to get in touch via the Contact & Details page or at matt@comfortablydumb.co.uk.

Articles on burnout, isolation and impostor syndrome are all in the works, so keep checking Comfortably Dumb out to see more helpful advice from those in the trenches.