One of the biggest problems I have seen in security leaders is a total lack of confidence. Many feel that they have 'blagged it' into their roles. They admit that they have a loose idea of what to do (based on the perfect world of the cert industry) but no idea how to do it. Plagued by doubt, they cling to compliance or IT shit that they at least understand. This doesn't do anything for their confidence as they realise that it's all imperfect. Does that sound familiar to anyone?

Here's a quick poll. What do you currently think that you need to learn or improve on to develop the next stage of your career?

Ever attended a security course and sat there thinking to yourself...'I've heard all this before.' Ever walked out of an exam with the feeling that 'none of that really makes any difference?' Ever got your cert renewal and debated just shitcanning it? Ever blagged your CPEs just to get over the line but never really learned anything new? Ever felt frustrated that the things you feel you need in your job aren't being taught? Ever had an instructor who couldn't answer questions and just pointed to the slides or book and said 'if it's not in there, don't worry about it?' Yeah, I reckon. Ever considered taking a different approach to this security lark? Or is this just 'the way it is' ?