Certifications are the beginning of the learning process, and cybersecurity professionals recognize that their career will only be successful with intentional continuous learning. Fortunately there are a number of resources that can be utilized to add to the foundations provided by the certifications.
Books
Whether you read or listen to books, there is a wealth of knowledge available for consumption. Look for books written specifically for and by cybersecurity professionals, in order to get practical guidance.
- Wiley maintains a catalog of cybersecurity books that cover a range of topics, from specific technical to general security leadership and history.
- The Cybersecurity Canon is a service where security professionals read and review cybersecurity books, so you can search for respected titles – particularly “Hall of Fame” winners.
- Humble Bundle is a site popular with cybersecurity professionals that sells bundles of books for a limited time, for a price you choose.
- Conferences sometimes give or sell books written by keynote speakers and vendors.
Podcasts and Videos
Keeping up with current information requires some dedicated listening and reading time. For the best information and commentary about current events, listening to podcasts or watching videos can keep a security professional well informed and aware of a wide range of topics.
Some cybersecurity podcasts to check out:
Pay attention who is producing or sponsoring a podcast or video. While there is excellent content produced by security vendors, there is also the potential for biased opinion – do your homework. You can start by doing an internet search for “cybersecurity podcasts” – and look for recommendations from neutral third parties and industry-recognized advisors.
Online Classes
Online classes are not just for mastering certification content. They can also be used to learn more about specific technologies, or cybersecurity professional topics. Most involve a monthly subscription fee. Some popular learning platforms include:
Blogs and Community Groups
Keeping up with the cybersecurity profession means staying in touch with the cybersecurity community. Social media posts are one way, but for a deeper, more nuanced understanding of cybersecurity issues and activities you can follow professional blogs and community groups.
Some to check out include:
- ISACA Engage: a community forum
- Unsupervised Learning: a blog by Daniel Miessler
- Kelly Shortridge: a blog by Kelly Shortridge
- Krebs on Security: a blog by Brian Krebs
- Schneier on Security: a blog by Bruce Schneier
- IEEE: a cybersecurity community
- LinkedIn: Cybersecurity Groups – there are many!
- Reddit: Cybersecurity forum
As a cybersecurity professional, you are expected to stay on top of technology and industry changes, and to practically apply the concepts and skills you learn for your certifications. Understand your preferred learning style – reading, listening, watching, writing – and look for industry resources to help you expand your knowledge.
