Build Diverse Teams...or Die!

In this episode of Unspoken Security, AJ Nash and Errol Weiss - Chief Security Officer for the Health Information Sharing and Analysis Center (Health-ISAC) - talk about the importance of building diverse intelligence teams.  They share their insights on the evolution of program and team building over the last decade (or more) and focus on how the exponential growth of hybrid and remote work as a result of the COVID-19 pandemic has changed our world. 

Errol and AJ dig into the challenges and opportunities of building geographically dispersed teams, starting with the interview process and going on to growing and mentoring people from afar, addressing and measuring productivity, burnout, and more. Perhaps most interestingly, Errol shares his opinion on how he sees things in the tug-o'-war of remote vs return-to-office (RTO) currently unfolding across our industry.

Finally, as is customary with every episode of Unspoken Security, AJ asks Errol to share something from his career that has so far been unspoken...and it's a really interesting story you're going to want to hear!

Transcript

Unspoken Security Ep 2: Build Diverse Teams...or Die!

AJ Nash: [00:00:00] Hello, and welcome to another episode of Unspoken Security, brought to you by ZeroFox, the only unified external cybersecurity platform. I'm your host, AJ Nash. For those who don't know me personally, or are first time listeners just checking us out, I'm a traditional intelligence guy who spent nearly 20 years in the intelligence community, both within the U.

S. Air Force, and then as a defense contractor. Most of that time was spent at Fort

Errol Weiss: Okay. All

AJ Nash: Meade. the private sector for about eight years now, and I primarily, primarily build or help other people build effective intelligence driven security practices. I'm passionate about intelligence, security, public speaking, uh, mentoring and teaching.

I'm also deeply committed to servant leadership, which is why I completed my master's degree in organizational leadership at Gonzaga University. Go Zags! So the goal of this podcast, though, is to bring all of those elements together with some incredible guests and have authentic unfiltered conversations, even debates about a wide range of challenging topics.

Most of us are faced with every day. This will not be the typical polished podcast. [00:01:00] You may hear or see my dog. She's around her somewhere. People may swear here. Uh, we may argue or debate and that's all okay. Think of this podcast as that conversation you might overhear at a bar after a long day at one of the larger cyber security conferences, especially maybe if there had been a couple drinks in Vegas.

These are the conversations we usually have when nobody's listening. Today our guest is Errol Weiss. He's a longtime leader in the security industry. He's an alum of both NSA and Citibank, among other places, and he's the current chief security officer for Health ISAC. Hey Errol, let's give the audience a chance to have a more of a connection with you.

Uh, can you talk a little bit more about your background and then what you're up to right now in your current role at HISEC?

Errol Weiss: Hey, AJ. Hey, great to be here. Thanks so much for having me. it's, uh, wonderful to spend some more time with you here. We'll learn about each other along the way. Um, yeah, I guess, uh, you know, to help provide a little bit more color, you know, you mentioned NSA. I started my career there. I had a couple of [00:02:00] different jobs while I was there working on the second side of the house for the first part of my career.

And then, uh, I changed teams and I went over to the, uh, the OpSec side of the house and, and hopped on to the penetration testing team where I was, you know, behind the keyboard and doing some really pretty fun things and learning a lot and working with some phenomenal people and, uh, had a great time and, and, uh, learned some terrific skills.

And then I left there to go do sort of that, you know, that thing, that InfoSec thing at the time, um, for commercial companies and. You know, the Internet was, I'd say, still just starting to be a thing. Online banking was, was just rolling out, and, uh, I found a pretty, pretty, uh, pretty new niche to, uh, to further my career.

AJ Nash: Well, I'd say so. I mean, we've crossed paths, you know, several times, not at the as it turns out, um, but, uh, several times since. And yeah, I mean, I'd say you've more than carved out a niche. I mean, you're, a well [00:03:00] known leader in the space. I realize you're humble and you're not going to take a lot of credit for that.

But like you were one of the big names I learned about when I first got in. Of course, I was at a bank, so it makes sense. You were leading the way at the largest. Probably best Intel organization within the financial sector, and I was at another bank. So I was bound to hear about you. But, um, yeah, it's I'm thankful.

You're here today. I appreciate it. Uh, you know, it's been great working with you all this all these different times in different places. And thanks for being on today. And we have a good conversation. I think we got an interesting topic here, and I'm looking forward to getting your thoughts and sharing them with others.

And maybe we'll debate on some things. We'll see how we

Errol Weiss: that's great.

AJ Nash: Yeah, as everybody knows, it's not So, uh, you know, we'll just see what comes out of it, but, uh, you know, you're in Florida and I'm in Minnesota. So no matter how bad it gets, it's not like we can reach out and touch each other today, but it's like that usually around here.

Um, so anyway, we should just jump right into the topic actually. So today's discussion, like the podcast today is titled, you know, build diverse teams or die. Uh, all right. Maybe a little dramatic, but you know, I know we're [00:04:00] both really. You know, we think this is pretty serious stuff, so, you know, I want to make sure people got the idea like this is, in my opinion, at least one of the big keys to success or failure.

So maybe you won't die, but whether you fail or not could come down to your diversity, right? And, and listen, you've been doing this a long time too. I mean, no offense, but we're both, you know, we got a couple of years on us. So, you know, with that as the foundation for today's discussion, man, what are your thoughts on the value of diversity, like specifically in intelligence teams?

But you can go wider than that if you want. I mean, you're, you're a leader in a lot of spaces, you know, give me your thoughts on this.

Errol Weiss: Yeah, and I'll even tell you, you know, I want to start off with sort of, um, even before thinking about the value of it. It's even how do you even get there? And I, and I, and I got to tell you, you know, again, um, I'll go to my career at Citibank. We, I was, uh, I had the fortunate, fortunate timing of being right place, right time and was asked to essentially create this cyber intelligence function.

Inside Citibank, um, this was, this would have been like 2007 probably. [00:05:00] And to go off and build that team and then years later, looking back, um, literally had a conversation with, uh, with, uh, with our HR representative and basically, uh, you know, a tough conversation and saying, you know, Hey, Errol, look at, look at your first line.

Look at, look at the leaders who are reporting to you. And I'm

AJ Nash: hmm.

Errol Weiss: my gosh, they're all white males. How did that happen? And, and, and again, there was no rhyme or reason to it, right? I thought we were interviewing people who were right for the job and hiring people who were right for the job, had the right skills, brought the right thing to the table.

And then lo and behold, I look behind me and I've got a lot of people that look just like me. So, you know, the first thing I'd say is, you know, in order to, first of all, in terms of building diverse teams, you know, you've got to make some conscious efforts to do that. At least I think, I think you do. And, um, you know, and it starts with even thinking about, like, who's interviewing the candidates.

[00:06:00] So you want people interviewing the candidates who look like the people that you're trying to recruit. So, if you're looking to hire more female or more minorities, I think you want the people doing those interviews that look like and fit those characteristics.

AJ Nash: Mm hmm.

Errol Weiss: So that, that, that was a big mind shift and sort of a shocking thing for me, um, at that point in my career.

And then, you know, like you said, uh, you know, build diverse teams or die. And I think it's, I think it's, uh, it's not an exaggeration. I think it's true. I think. You know, when you start looking, uh, you know, the problem with having all the white guys behind me is that we're all thinking alike, and we're all, um, talking alike.

We've all got similar experiences to a large degree, and we all bring those same perspectives to the table. So when we are looking to solve problems, it suddenly becomes like. Uh, you know, the group think, right? The first one with the idea, everybody agrees. Okay, done. We move on. And and it's just, we're not [00:07:00] bringing in a variety or new ideas to the table, new viewpoints or perspectives.

And so, you know, that's the important part. And when you're hiring females, minorities, for example, you know, they're bringing the wealth of that background and, you know, the richness of, of, of their culture. To the table, and it's and it's important, especially in the intelligence world when we're relying on the analysis that those, um, individuals are doing in those write ups, you know, it's so important to be able to view and recognize those perspectives in that writing.

AJ Nash: Yeah, man, I, I couldn't agree more. I mean, obviously, you know, somebody is going to listen to this. Maybe if they listen, we're all right. But if they watch it I'll go, well, great. Two white guys are going to talk to me about diversity. And I gather that, right? And, you know, the truth of the matter is I could have had this discussion with several other people.

Um, and it's, it's an interesting position to be in, you know, on the one hand, I, and so this show, for instance, I'm, I'm working, I'm conscious about diversity, right? So I've got, you know, I think I met my first 10 guests picked [00:08:00] out. I think, you know, if I last, I looked like six or guys and four women, it's pretty white cast, to be honest.

I'm still working that, but it's not from a lack of effort. It's. The challenge, of course, is there, there are only so many people in the industry and you're like, okay, great. Now, how do I find the right people? I only want stars. Of course. And we have tons of stars across the board. I don't care what color or race or gender or creed or religion or pick whatever you want.

We have stars in all those categories. It isn't a white dominated field in terms of talent. It's just a white dominated field in terms of numbers. So trying to find those people, right. And then get them scheduled and scheduling is about challenge. But I think what I also didn't want to do is say, okay, I've got this fantastic woman.

Let's spend an hour talking about what it is to be a woman in cyber. How tiring must that be, frankly, for that woman? Right. And I've got friends, you know, I've got these women that are gonna be on the show and they were all of them, I think kind of breathe the fresh air. I said, listen, we can talk about whatever you guys want.

Um, you know, your perspective on life will be different than mine in the industry. I just want you to know, I didn't bring you on so I could spend an hour asking you the same question you probably get asked because

Errol Weiss: that, uh,

AJ Nash: it's not, it's insulting in [00:09:00] some way, right? It's, I want to ask is it to be a leader in this space?

Not how is be a woman in this space? Right. So,

Errol Weiss: tremendously. I'll just add, you know, hey, one of the things I do at our health ISAC summits is I host a CISO panel at the end of the summit, and I tell you, I was so proud and so thrilled that at the spring summit that we just did in Florida this year, I had 4 female CISOs up on stage with me doing that panel.

And when we were doing the prep, one thing, one of the women raised, she said, we are not going to talk about what it's like to be a female CISO. And so I was like,

AJ Nash: Bingo.

Errol Weiss: off my list.

AJ Nash: Yep.

Errol Weiss: about that. And, and, uh, it was, it was great. And somebody in the audience, you know, during the, when we opened it up to Q& A, some of the audience said, hey, kudos and round of applause for having four women up there.

It was awesome. But, you know, exactly to your point. You know, nobody wants to talk about that.

AJ Nash: Now, I think, I

Errol Weiss: about the other qualities.

AJ Nash: right, I think where it fits in, right? If you're having a discussion, you [00:10:00] know, I've, I've told guests, listen, everybody should be who they are on this show. So obviously we're going to represent where we come from. So certainly, if you're a woman, you're going to, you're going to represent a woman's opinion, or at least your opinion, which comes from a female, uh, lens, let's say, right?

And that's all good. But yeah, I, I've left it open. I've just said, I'm not going to, I'm not going to pigeonhole someone. I'm not going to make it seem like that's the reason they were there. The people that are going to be on the show are all. You know, I have amazing resumes. They're all brilliant. They're always smarter than me.

I don't know why people spend time with me, but, um, but yeah, it won't be about that, right? So, but I think you're right. You talked about, you know, the challenges and that there has to be a focused effort because again, this industry is still pretty well dominated by middle aged white guys and there's bias that we don't even think about, right?

We know this Intel, we'll talk a little about Intel bias, but there's bias built in, right? And so you got to fight against that bias and you got to be conscious about it and say, I want the best candidates. I don't care where they come from or who they are really. You know, and then, and then to be able to work on that because otherwise, like you said, you wake up one day and even if you care, you can easily turn on and go, yeah, there's a whole room.

People look just like me. There's a good chance. Our answers are all going to seem the same [00:11:00] because that perspective, as we talk about Intel, um, you know, everybody's going to have the same perspective and you may not understand the differences and. There's a lot of nuance when we do Intel. I think people who don't do Intel may not realize that there's group discussions and there's bouncing ideas off each other.

And if we all have the same background, we have the same economic background and social, you know, experiences, we just may not have the creativity in the room to imagine a circumstance that we never heard of or thought about. And then somebody else who comes in and it's their life experience says, well, what about this?

You go, well, that's mind blowing. I never would have occurred to me. So I'm, I'm with you. I like to. You know, be working with a building. If I'm the guy building or working with or consulting with teams that are as diverse as possible, and it isn't just gender. It isn't just race, uh, experiences, their education is there, you know, cultural difference, geo economic, uh, geopolitical differences, um, you know, geographical locations where people raise economic differences, uh, even some, you know, interesting backgrounds.

I've seen Intel teams that hire. Uh, people with journalistic [00:12:00] backgrounds, people with music backgrounds and math backgrounds, obviously in our space and cyber, a lot of technical folks are tied in. Um, and that's a very different background. I mean, I'm an, I'm an arts and science guy. I don't, I don't have the technical chops of some, a lot of the folks I work with, frankly, uh, but they don't have whatever experience I have.

Right. So, um, yeah, I, so I'm curious about that just specific to the Intel teams. Right. And so you've assembled. Amazing teams, right? I mean, you're well known for this. Uh, is it the same with you in the diversity? Are you looking at all of that picture? Are you looking at career diversity, education, diversity, geographic?

I realize you may not get it all, but is that is that your thought process as you're going through it?

Errol Weiss: Yeah, I think now that's exactly the case where you do have to look at all of that. And I think, you know, you get to a point where the team is. Is so big and so filled out. You've achieved some of that diversity that you're looking for. Now, when you start adding people on now, you're sort of looking at, you know, where are the gaps, right?

What do I need to? What do I need to fill in on that next hire? So, thinking about things like, like, uh, maybe I need more [00:13:00] technical help in a certain area. Maybe I need more geopolitical coverage in some other area of the world. And so you're starting to think about, like, when you, when you do that next hire, okay, you're looking for someone that brings that expertise to the table.

AJ Nash: Yeah, well, that makes, I mean, that makes perfect sense, right? And, and, you know, it's changed. I think I don't want to get ahead of too much because we have more questions to go through, but You know, the, both the opportunity, I think, um, and, and, uh, well, I guess the opportunity maybe is the big one right now changed with, you know, with COVID with remote work.

Right? So, you know, it's, I guess I should ask you, it wasn't one of our questions that we had prepped. So sorry, I'm gonna throw you on the spot, but now it's part of this. So how does that fit in for you? Has that made it? Easier to, to have a more diverse team. Is it more challenging to have a more diverse team?

You know, I mean, we have a whole world to choose from. It doesn't have to be somebody who's local to the Florida office for y'all. But, um, you know, how has that impacted diversity and maybe an age as, as well as that comes into play? I don't know if there's a, [00:14:00] if there's a, I'm going to investigate if there's a difference in ages that are more or less comfortable with remote work and, and, you know, working remote teams, like how have you seen that impact things?

Errol Weiss: Yeah, I think, um, yeah, certainly in the, in the, in the covert area, there's been a major shift to remote work. And so, uh, you know, in some, some sense, I would, I would say that we're, we're actually competing now with even more than before. Right. So if you were a hybrid or remote pre COVID, now, guess what, you're going to be competing a lot more organizations now because there's a lot more companies that are working remote, are, are hybrid.

And we're starting to see them pull back people to the office and whatnot. Now that we're at this particular stage in the, in the, in the end of the pandemic, fingers crossed, um,

AJ Nash: so.

Errol Weiss: Yeah, and right. And we've and organizations, uh, and operations have shown that we can, we can still function with most of the workforce being [00:15:00] remote.

So why not continue that? So, I think, I think that, uh, in order to be competitive, uh, we've got to have, we've got to be able to enable that hybrid workforce. And yeah, it's your point, right? I can, that opens up the possibilities in terms of all of the above, right? The diversity from all the aspects that we talked about, you know, from the human aspects of it, whether it's race, gender, um, and then certainly location, economic backgrounds and whatnot, um, educational backgrounds,

AJ Nash: Mhm.

Errol Weiss: geography already.

And then, and then take advantage of that too, right? I mean, one of the things that, uh, that, uh, that I will also strive for, as we know, right? Cyber never sleeps. So why not hire people where we can and see if we can set up almost a mini, I'll say, follow the sun. So taking advantage of the time zones and, and, and play to that.

So it's okay for us to have someone in Europe and maybe Asia Pacific, for example. So I get that around the [00:16:00] clock coverage. So, yeah, that's, you know, it's a beautiful thing. We'll play to that too.

AJ Nash: Yeah, that's a really good point. And you know, it's, uh, I'm curious. I realized I'm going to kind of cheating on some of the questions that we prepped a little bit just for everybody knows, like I said, I tell people it's unscripted and it is, but we do have at least a prep call. Errol's going to end up getting screwed on this one cause I'm, I've got better ideas in my head right now than we started with, but I think you're still prepped for most of the things.

I won't put you

Errol Weiss: Yeah, by the end of this, you'll figure out what my tail is when

AJ Nash: That's right. I'm going to figure it out.

Errol Weiss: question.

AJ Nash: I'm gonna play poker with you after that, but you know, you've been, you've been out of the government space for a while, you know, it's been the private sector for a long time doing this. Right. And so what have you seen?

It, how has this changed over the last, you know, we talked to obviously remote. I'm sure I'll come up as part of this answer too, but what have you seen really changed over the last, I don't know, say 10 years in terms of both the interest and the effort towards diversity, uh, but also the results, you know, where, where are we going with this?

Like I, we, you and I both just lamented, there's a lot of, you know, male, white middle class dudes still running a lot of our organizations and around a lot of this industry. So I feel [00:17:00] like we're not getting places, but I think we also might be. So, I mean, what have you been seeing right now for change over say the last 10 years or so?

Errol Weiss: Well, I mean, I'm going to say really that, that, that the function of an intelligence, um, uh, team inside the private sector to a large degree, I, I, I would say is pretty new. I mean, I, I think when, when we were doing this at city in 2007, I don't think that there were a whole lot of, um, intelligence types, In the private sector at that time doing, um, uh, I say formal intelligence operations on behalf of large commercial companies.

And so, um, you know, it's still only 20 plus years old now, or 20 ish years old now point, which, you know, in the scheme of things, isn't that long. Even though.

AJ Nash: lot longer. 20 years used to seem a lot bigger when I was younger. Now you're I'm with you now. It doesn't seem like it's very at all.

Errol Weiss: all real quick that we get this [00:18:00] old, but, um, you know, maybe intelligence might be like the second oldest profession out there. So around a while. And, um, um, so from, from the science of intelligence and the methodology and all of that, it's been around. So through been kind of knew where, how to, how to get things going at that point.

But I would say, you know, in the beginning of that. It was tough to find and hire people because, um, It was, it was either we were taking smart technical people and teaching them the intelligence process, or then at some point we were able to get lucky and start getting people that were coming out of the military or the intelligence community and, and wanted to do that.

I one of the people that we hired, um, uh, came to, uh, city and, and when she got hired said that, you know, I never, when I left the military, I never thought I'd do ever do intelligence ever again. And lo and behold, here we are. So I think that, um, that there was a lot of growth happening in those early [00:19:00] years and, and the struggle to set up, you know, intelligence inside commercial organizations, there was a lot of studies done, I remember, uh, with, uh, working with, uh, Carnegie Mellon and, uh, software engineering Institute at the time, you know, studying Intel, uh, functions inside private sector organizations with a lot of interesting findings at that point in time.

So it was pretty new. All right. And then, you know, you bring up the diversity factor and then you've got, you know, old adults like me that, you know, suddenly wake up one day and say, crap, how did I end up with five white guys behind me helping to run this thing? how that happen? And so, you know, again, I never planned to do that.

Never meant to do that. But, uh, you know, you wake up one day and that's the reality of it. So it's, yeah. It's, it's the revelation that man, you know, you've got to take a proactive role in this stuff and, you know, it starts with the creation of that job rec in terms of, you know, what kind of people are you looking for?

What kind of [00:20:00] backgrounds education? Yeah. And I'll say yes or no on the education. Right, because we're all, you know, today, we're starting to even eliminate the need for a college degree. Right. Um, but anyway, you know, starts, it starts there and it starts with that pool of candidates that you're looking at in the pool of people that are interviewing those candidates, as I mentioned before.

AJ Nash: Yep. Absolutely.

Errol Weiss: we got to take an active role in it. And so, yeah, that's where I'm coming from now.

AJ Nash: Well, I mean, it's, and it's good to hear, right? I mean, it's that, it's that thoughtfulness, right? And that's, I think the thing I've seen, I've been private sector for about, I don't know, eight years now, I suppose. And I think that's the part I've seen people lean into more is, is a thoughtful approach to this.

And it's, you know, it's, it's. At first, I think it was more of a discussion a discussion for a long time. Yeah. Yeah. We really should be more diverse. You're right. And then everybody goes back to what they were doing. And, and I think, you know, I've seen a lot more thoughtfulness over the last handful of years and not just because leadership tells you so, or because HR comes in and gives a briefing and says, we got to do this, right.

I've seen thoughtfulness at the operator level, [00:21:00] at the team level, at the team lead level, you know, director saying, Hey, I think. I think the much like we have been working on the education of letting people know what is Intel, right? What do we mean by Intel? How do you build Intel teams, et cetera? I think what is diversity and why do we need it is starting to sink in at a level like what we are talking about, which is this makes us better, right?

This is this is not and I know people want to politicize some things. And there are people saying, you know, people like quotas. People don't like, uh, affirmative action, whatever it is. In terms of Intel, I listen, I'm not interested in the political discussion. I can argue with people about that some other time, but in terms of Intel, I'll, I'll, you know, plant the flag.

It makes us better period. There's, there's no debate to my knowledge among Intel professionals that you get better Intel teams when you have more diverse teams. And that isn't some, for those who want, uh, who may disagree and want to politicize, it isn't some argument saying we're going to pass up brilliant people to get unqualified people just because they fit a category that is not what anybody is saying, or at least not what I'm saying.

Uh, and I know not what you're saying, but there are people.

Errol Weiss: your customers better [00:22:00] by hiring, you know, diverse set of analysts on your team. Absolutely.

AJ Nash: Exactly. And they are everywhere. You know, I think it's, it's interesting. You talked about, you know, looking at the education and even is a college degree, the right answer anymore. And maybe it is for some roles. It's not a guarantee. Certainly. I mean, I'm seeing a lot more, I'm curious what you are with this.

I'm seeing a lot more of people who are, you know, they've got some education, uh, maybe they caught some college, maybe they didn't finish. I don't know. Maybe they got a college, but it doesn't relate. And they got a lot of certifications. They got hands on training. You know, this wasn't one of our questions, but I'm curious.

Since we talked to education, you know, how are you, how do you see, uh, like certifications? Versus degrees, not necessarily versus, but how do you, how do you view those? You know, does that put someone even playing field? Are you guys changing your job recs? Are you seeing people in the industry change job recs to say, Hey, that proves you're qualified enough.

Are you, are you maybe doing a proof within the interview process? Hey, let's, here's some, you know, a test of whatever it is to see if you're, you can do these things. Has that changed at all?

Errol Weiss: Yeah, definitely. I think that's another area that we're seeing, you know, especially like between intelligence and all the [00:23:00] cyber security roles that are that are unfilled today. I think that, uh, that hiring managers managers are definitely looking at those. Uh, at those, uh, requirements now and rethinking that and, and, uh, I know definitely that there are people that are, you know, scratching off the, you know, college degree requirements, not at that any longer.

Um, and, and really trying to focus in on the, on the base level skills that that person has, what's their capability and then, you know, things like, you know, intellectual curiosity, right? You know, do they have that drive to learn, you know, better themselves do more, you know, the societal give back and. Uh, contribution to community and all that, you know, looking for those kinds of attributes.

And, you know, the whole idea that if you've got the basic skills that I can teach you the rest. And that's what I think people are looking toward now.

AJ Nash: I think that's huge. You know, you talked about that, [00:24:00] that curiosity, right? I've heard people say, you know, I want aptitude and attitude, right? Um, you know, experiences is useful and there are some places where it's mandatory. Listen, I aptitude and attitude are great. I don't want you to tell me you're my surgeon and you know, I got to go get her an attitude.

Well, great. Where's your degree from? How many times have you done this surgery? I'm much more interested in that today. I don't care if you're a jerk because I'm gonna be unconscious. So it isn't for every job. Seriously. But after that, I've heard a lot about, but the other thing is, you know, when we talk about this, we keep hearing the stats on how you read them.

Millions of jobs. I don't know how many jobs are open and cybersecurity, right? The number goes up every year. We don't have enough. We're not making enough people to fill the jobs, et cetera. You know, does, does this It changed, right? Does the talent pool become wider or deeper, uh, as a result of a, you know, changing some of these requirements, maybe saying, Hey, a degree is what's limiting some of us.

And we're not saying we're downgrading the need to do the work well, but just saying, Hey, a limiter we shouldn't have, but also getting back to the whole remote piece, you know, remote and hybrid and how that works. Does that, is that, are those part of the solution for closing this gap and giving us a better talent pool, a deeper, [00:25:00] wider talent pool to fill

Errol Weiss: Yeah, I think I think it's the deeper wider talent pool. I think that's ultimately what we're after. Right? You know, I think there's definitely a gap in the number of candidates that we have today versus the jobs that are out there. Yeah, we always hear big numbers. I've heard recently. There's a lot of debate about how realistic those big numbers are.

It's probably not as big as we think it is. But, but, um, but I, but I, but I like the idea of, of opening up that candidate pool. And again, back to the overall topic about improving diversity, you know, if we're able to eliminate that college degree, for example, then, you know, that opens up the possibilities to lots of candidates who, you know, maybe, maybe, you know, underserved underprivileged communities that didn't have a chance to go to college.

Um, yet they've got that drive and energy. And intellectual curiosity to do the job and do it well. So let's let's take advantage of people like that and try to get them into some of these [00:26:00] starter positions that at least given some of the basic experience and training that they need to get started.

AJ Nash: Yeah, I think that's a good point. You know, the college degree things really interesting. You know, I'm, uh, personally, I won't say I'm conflicted. I guess more disappointed in that, you know, when I grew up, it was like you go to school, you go to college, you know, you're set for life. Basically, if you get a master's by your special, right?

And just around the time I finally got around to finishing my master's, we all woke up and went. Yeah, maybe this isn't the way it should necessarily be, uh, you know, I think people have realized that there's some classes and that goes with that. It doesn't devalue, you know, the education I'm through with what I learned and for the specifics I get to apply it to, uh, but at the same time you go, gosh, what are we doing educationally?

We've created this, you know, this requirement. Does it really apply? And there's value to education, of course. I don't think it may disagree, but does it apply here? Are we just eliminating the opportunity to have people who just didn't have the opportunity because they couldn't afford it? College is so freaking expensive.

And so I've, I've been, I've personally have enjoyed seeing some of this shift and I know brilliant people who don't have college [00:27:00] degrees. Um, you know, they got certifications, they got hands on training, whatever it is. Giving them the opportunity to show, Hey, I can do the work. Is that not what you're hiring people for is to do the work?

Uh, or as you said, you know, I can learn how to do the work. I'm, I'm curious. I'm willing to come in, know, at a low level, um, you know, maybe internships. I don't know. I know you guys do some work with that. I'm curious about your thoughts on, on internships too, as a way to, to get in the door and what are the requirements for, for that, you know, does somebody have to be in school to get an internship?

Can they get an internship without being in school? Um, I don't even know if I've seen much of those change. I think most of those come off colleges still, but I know you guys do some work with that too.

Errol Weiss: Yeah, in fact, um, you know, we just moved our headquarter locations to Orlando and we're right on the doorstep of a. I know we're right on the doorstep of UCF, University of Central

AJ Nash: Yeah

Errol Weiss: and so we reached out to them during that move process to initiate that relationship and really start building, um, uh, a, uh, a partnership and, um, we, before we even moved, [00:28:00] we hired, um, a, uh, graduating senior or someone that would be graduating, um, this past May.

And, uh, brought her on board as part of that intern program. And now that we've moved, we actually have, uh, we brought, uh, 2 more interns on, um, as part of that program. And, you know, it's working out great. And I, I think, uh, you know, they've got an opportunity to learn really develop some, some skills and, and learn about what it's like to work in an office environment with those expectations are right.

These are. Very practical things that, uh, that you don't end up learning right to the point while you're in, in, uh, in college necessarily. And then, uh, and then I've warned everybody also on the staff that, uh, hey, uh, you've got an opportunity to learn from these guys too, right? Because. They're they're learning new things.

They're learning new methods and they bring again back to the diversity, right? They bring different experiences to the table. So every single 1 of us on staff, including this old guys have [00:29:00] got a opportunity here to learn from the youngest. And so I'm really looking forward to to working with them and what what happens next.

But I think, you know, as you mentioned, right, you have to be in a college program to snag one of these internships. And I think, you know, I would encourage anyone who's listening who's who's in a situation where they're not necessarily in college and they want to try to figure out how to get started in a career like this.

Start, uh, figuring out who's in the area and start, uh, start, uh, start a letter writing campaign to try to get some attention and see if you can get, uh, get hired on as an intern, part time intern. Some, some are paying, some aren't. And, uh, at least get your foot in the door and see if, uh, see if you can get some of that initial experience.

AJ Nash: Yeah, I think that's an excellent point, right? It's great to hear that you guys, even before you moved, you started reaching out and saying, Hey, how are we gonna, how are we gonna work on this internship program? Right? I think, um, you know, I think we're seeing some universities develop some great programs.

I don't, I don't know UCF particularly well, personally, so I can't speak to that. I'm a good university, I'm sure. [00:30:00] But, um, it did remind me some programs we've even seen where universities are developing cyber intelligence programs specifically to pull it back discussion, right? Where they're combining traditional intelligence training with traditional cybersecurity training.

So you would mention that earlier in the conversation that it was one or the other, right? You'd hire a technologist that tried them Intel or hire Intel. People try to teach them tech. I've seen some of these programs. I, there's one in a college in North Carolina I'm familiar with. I think, uh, James Madison, I think has one in Virginia.

Um, there's a, I admit I'm biased. I've spoken at their comp at their, uh, To their students at the university. So it's a plug for James Madison. But, um, uh, there's, there's more of those. I don't know if you see if they have a program like that. Are you looking at other programs like that? Is that

Errol Weiss: they 

AJ Nash: I do. Oh, perfect.

Errol Weiss: they do. It's amazing, right? I wish I would have had something like that, you know, before I started doing all this stuff.

AJ Nash: Well, yeah, it's yeah, it's well, now you should be teaching it instead. So if they haven't, if you see if hasn't reached out to you, you should

Errol Weiss: There you go. Thank

AJ Nash: have a chat him. You could totally be teaching some of these courses at this point. Um, so, all right, let's, uh, kind of transition. We got one more of the stock questions for today.

I've kind [00:31:00] of gone all over the place and I moved this one. I've actually literally helped rewrite this one while you were talking, but I think it's, it's, it's still a lot of what we said. I think it just fits our discussion better now, which is, you know, I want to get in getting this last piece. I want to kind of roll back into the discussion we started having a little bit in here, and I know we talked off cam, uh, before about specifically.

The, the structures we're going to have going forward, right? This talk about whether it's office, whether it's hybrid, whether it's remote work, um, you know, obviously we're talking about diversity and this is going to play a factor in some of this. So in your opinion, like what's the best model, I'll put you on the spot.

What's the best model. And then what challenges and opportunities are you seeing across all the different structures, uh, in terms of, like I said, office, hybrid, remote, what do you guys. If you're allowed to say what you're doing and you're the boss, I guess you're allowed to say whatever you want. What are you leaning towards?

What do you think is the best way to go? And maybe a why in there, but also the opportunities across all these different kinds of structures and the challenges.

Errol Weiss: Yeah, no, I mean, hey, in this, you know, this Intel space, I think, you know, the idea for us will be we will be hybrid remote for for [00:32:00] for the long haul. Um, you know, I, I know when we were talking during the prep and all that we, we, you know, I said something to the effect of like, hey, in a perfect world, we'd all be at the same location.

AJ Nash: And I jumped all over you.

Errol Weiss: you man. You beat the crap out of me. And I think, you know, and I will still stand by that, so yeah, I mean, hey, if I didn't have a life, if I didn't have a family,

AJ Nash: Your definition of a perfect world and mine don't match arrow, but I get going. Just giving you a hard time.

Errol Weiss: vacuum, you know, all that,

AJ Nash: Oh, a hundred percent. I

Errol Weiss: that? Yeah. So, um. You know, we'd all be in the same room.

We'd all be collaborating with each other. We'd all have instantaneous like, you know, hall, hall talk and water cooler talk and all that kind of fun stuff. But that ain't the reality of the situation. Right? So. You know, back to all the things that we talked about earlier in terms of taking advantage of, of, uh, of growing diverse teams, hiring the right talent, getting people where, you know, in time zones that we want them to be in for different reasons, uh, locations, cultures, all of [00:33:00] that, and, and taking advantage of, uh, of the beautiful remote world that we live in today.

So I think, uh, I think we're, I think that's, that's, that's the reality for us. And I think we'll see more and more companies going that route as well. I think that will drive through competition for some of these, you know, these resources sure.

AJ Nash: Yeah, I agree. Listen, I, and I get what you were saying. Obviously when we're talking to prep, you know, yeah, I, the ideal world. Right. But I get what you're saying. Listen, I, for those who've ever been in the military, for instance, you know, when you're deployed, you do great work, um, you know, deployments are hard for a lot of reasons.

And, and I'm an Intel guy when I say deployed, by the way. So if you, you know, I don't want to be compared to people who are out in combat, I'm not talking about that kind of work, that's a whole different world. I'm not. I'm not claiming that tonight. I don't, I can't speak to it in Intel. So there's stress of being deployed, but when you're deployed, we often talk about, you know, TDY someplace, at least I can just focus on this.

Like, this is all I do. Like we were together. There's camaraderie. You do the work, you know, you don't have to pay bills. You don't have to walk the dog. You don't have to worry about whatever. So there is something to be said for [00:34:00] that. I absolutely agree. Co location and that bonding that's with it. Right.

But there's a reason we aren't deployed for. 10 years at a time, right? It does wear on you. Um, so yeah, I don't disagree. I get what you were saying in terms of, you know, in, in, in that scenario, right? But yeah, I've been a strong advocate, obviously. Now, listen, I work remote. Um, you know, I'm, I'm in Minnesota.

The company's in, in, uh, Baltimore. Uh, ironically, I lived out east and changed companies after I moved. I used to live about a half hour from headquarters. You know, if every company said you're only going to be in the office, clearly I'm going to have to find something else to do, and I don't want that, but, uh, I'm a big believer that hybrid, you know, is a good middle ground, right?

Ideally, like, I'm, I'm, I'm thrilled where I'm at. I'm not moving. Um, you know, I just built a house. I can't go any place. But in, for me in an ideal world, I'd be in the office one or two days a week. I think I would love the opportunity to have more of that connection. We have to make it through virtual means and we do all right with this, but I'd love to have that a couple of days in there, you know, focus time, right?

You're in for meetings. You're in for specifics. [00:35:00] You get what you need. You get the connection. You can get a lot done in a day in a room together and kind of turbocharge it. And then go back and do, you know, the things that we need to do and balance the life and all the stuff that goes with that. Right.

And so I think I'm seeing more of that, but you know, it's, I mean, I guess nobody knows for sure. I've seen lots of data. I'm sure you have too, like lots of, I see a report one week, it says, you know, uh, during COVID we've proven that productivity didn't change at all. Nobody should have to go back in the office.

And the next week, some other company comes out or some organization says, no, no, productivity is way down. People have to get back in the office immediately. It's terrible. And, you know, I think there's so much conflicting data. That may be intentionally or unintentionally biased that it's so hard to know what ground truth is.

I do know the financial sector has come out and said that we're going to lose like 800 billion in corporate real estate value if people aren't in the office. So I suspect that's a motivating factor for some people. But, um, but I think from the diversity standpoint, you know, the key piece we were talking about is like you said, it, it offers that opportunity again to reach out, you know, the person that would.

That make that team more diverse. This was somebody who knows a different [00:36:00] area, different background, different culture, different experience,

Errol Weiss: studies.

AJ Nash: the world's your oyster. Now you can recruit from essentially any place. Right. Uh, I am curious though, with that, are we going to see, do you think, uh, we might see some challenges in terms of how would, I don't know, kind of domestic outsourcing is kind of what I mean.

You know, kicking around in my head. So for instance, why would I hire somebody in New York city anymore? Or I would hire somebody in LA or San Francisco or, you know, pick a, pick an expensive place. Why, why wouldn't I, why would I ever hire them anymore when I can hire somebody in Memphis, Tennessee or Phoenix or, you know, Billings, Montana, wherever the talent might be.

Have you run into that? Not, have you guys thought about that? Is that, is that a concern that we're going to run into a situation where people actually have to leave the more expensive areas because they're going to be competing internally at rates they can't afford to pay.

Errol Weiss: Yeah, and I think I mentioned a bit about that before, too. I think I, you know, the whole notion about competitive forces driving the workforce and, and. And that, and that hybrid remote workforce that that will continue to be a [00:37:00] factor. I mean, much to your point, right? It could be that, uh, that they would want to drive, um.

Some of those functions to, let's say, lower cost locations, and then they can hire remotely from those locations as well. But again, I think that that those companies are also. In competition with others that are hiring, hiring remotely, and they're going to be dealing with that as a factor too. So maybe you won't be sleeping as much on labor as you think you will.

AJ Nash: That's a good point. The free market does go across everybody, right? all going to be shopping same, same talent pool, which we still said isn't big enough yet. You know, I mean, we, I see a lot in this industry. We're not an exception. A lot of work that is overseas. You know, India has as incredible tech talent at, you know, compared to Western prices, certainly less expensive, right?

Just to name one area. There's a lot of them, but there's always been some functions. That I've strongly argued against pushing in those places, uh, Intel being one again, because there isn't the Intel background, right? There isn't, there aren't people trained in Intel in some of these [00:38:00] other places the way we are in the West.

I mean, you know, Australia, Canada, UK, us, New Zealand, I suppose, uh, and some allies in there, but I wouldn't. Offshore Intel, like true Intel functions to some of these locations because talent's

Errol Weiss: and, you know, you talk about the value of the hybrid part, right? You want that time when you can get everybody together. So, you know, you. Yeah, it's tough to pull them when they're that far away. So, but if pull together from the US, right? Different points in the US to do that. And, you know, I know that's in this company, since I've been with help, you know, that's 1 of the things that we're trying to do is getting.

You know, all the team together, at least, uh, now we're gonna we were twice a year now that we're a lot more global than what we were before. We'll do at least once a year. But, you know, that's the investment that we want to make is be able to get everybody together. And I know, you know, we talked about.

You know, getting your butt to headquarters, uh, on a regular basis. So I think, you know, that that's that's a factor to write. So back to that whole hybrid thing, you want to get yourself back there. You know, you don't necessarily need to be, you know, you don't need to wait until you [00:39:00] get called back. You know, volunteer, get yourself into the office, spend some time there and get to know people there,

AJ Nash: yeah, that's a good point. Like, you know, I don't want to call it FaceTime just outright. I mean, I don't want suggest that, but we all know presence is part of it, right? Just it's that's a human thing, right? Yeah. If, if, if Leadership knows you and knows your work is either better or worse for you, depending on if it works any good, I guess, you're, you're not good at the job, I'd say hybrid as far or say remote as much as possible and keep your name out of out of their mouths.

But, you know, if, if you're decent, I think, you know, there is something to that, right? So, so maybe that's something else we should start thinking about. So, as we talked about, Having to fight against bias, having to really, you know, think about diversity, building diverse teams and actually putting the effort into it.

I wonder, and we didn't talk about this at all previously, I wonder if we won't have to do the same thing in terms of biasing against remote people when it comes to promotion and things of that nature. You know, if it used to be, we were all in the office, you were sort of on an even playing field, at least if you spent more time talking to the boss, you're either, you know, kissing a lot of butt, or maybe you're really good at your [00:40:00] job or really bad again, but now you could be brilliant and never be noticed.

And Frankly, if you have a lousy boss, your manager could be taking credit for your work. I, we may have to think about mindfulness not losing track of, of people who are rock stars just because they happen to be far away. We hired them far away. wanted them to

Errol Weiss: I, I think all, you know, even if you're all in the office, I think that that's possible, right? You know, there's definitely I remember doing the collegial reviews and somebody saying, you know, this person's a rock star. And I'm like, I've never seen or heard that person the whole time. I've been here.

Who is

AJ Nash: huh.

Errol Weiss: So. You know, there, there is a bit of that. You got to get out. You got to, you got to, you got to make sure your people are getting out. You've got to be the advocate for your people and you've got make sure that you're coaching them to get in front of the right people, you know, and if they're remote.

There's, there's a little more that you have to do to do that. I know, like when, when I was working at Citi for example, and I was fully remote, um, I was making the effort to get to New York to get to those managers, spend time with them. Uh, and I [00:41:00] remember somebody asking me about, uh, you know why I had a suitcase with me?

And I said, well, I just got in from Maryland this morning. And they're like, oh, I thought you lived here. I'm like, no. So, you know, that's what you

AJ Nash: good perception. Yeah.

Errol Weiss: You almost want people thinking that, yeah, you belong there. And, uh, yeah,

AJ Nash: Yeah. I thought you lived there as a great compliment. You clearly had presence. You were, you were there. Well, I know you've, and you've grown some great leaders. So obviously you put time in there. I know some of the folks you've worked with there and where they've gone. And, uh, I won't call anybody out by name cause I'd miss people and unfair, but you've, you've obviously grown some leaders along the way too.

Cause there's, there's folks that have stayed where you've been or, or moved on since that have done great things. So clearly you found a way to, to bridge those gaps and to, and to make sure people got credit for what they'd done and got mentored and grown. So, you know, it's. Yeah. Of course you never hired me, but I'm not going to say anything about that anything, but, uh, you know, it's, I also never applied at city when you were there, uh, anyway, so, all right, so let's, we, that's our, like, that's the bulk of what we, we wanted to talk about here.

Right. But, uh, we're through the three questions and in my case, three, I'll turn into seven or eight or whatever, but [00:42:00] with every show, you know, as we get, as we get near the end here, you know, I want to close out the show with every one of these, I've been asking every guest a bonus question. And so since the name of the podcast is unspoken security, you know, the question I'm asking is tell me something you've never told anybody, you know, it's something that's so far been unspoken.

Errol Weiss: Yeah, I'm, I'm at least glad that I knew that this question was coming, so I had some time to think about it.

AJ Nash: Yeah. It's not a gotcha least.

Errol Weiss: uh, not a answer, but in all seriousness, I will say that, um, when, when, uh, the, the, my leadership when I was at Citi, they asked me about setting up this Intel program. Um. Overtly, I said, Yeah, sure.

Definitely would love to do it. And the back of my mind, I'm like, I've got no idea on how to do this. I've never done anything like this before. I have no idea what I'm doing. And so, um, that would definitely qualify as something I've never told anybody. Right. And, um, and,

AJ Nash: So what'd you do?

Errol Weiss: uh, well, back to what you said [00:43:00] before.

Right. It's all about, uh, it's about the networking and hiring really good people. And that's what I did. And so, uh, I, I worked with my mentors. I worked with people that I trusted and tried to figure out what, what did I need to do initially. And then, and then when it came to the hiring, it was, you know, I was looking for certain qualities people culturally and all that.

Of course, unfortunately, we know how the first part of the story turns out. I hired a bunch of white guys. Um, but, uh, fix that problem later

AJ Nash: Now, what year was that? I'm curious. What you were there?

Errol Weiss: so again, we're ramping that up. That would have been 2007 and when all that was when all that was going on and, um, and really, you know, surrounded myself with some great people and and and provided.

The, uh, the vision, some of the strategy on what we think we needed to do, hired some great people who had done some of these things before, and then let them go off and do their thing, right? So it was all about, you know, providing that basic leadership and, and, [00:44:00] and let people do that thing, provide them some autonomy and, gave them, um, the ability to, to make those decisions and create.

And I thought, uh, you know, when all, when all said and done, we'll look back at what we created. It was pretty phenomenal.

AJ Nash: Well, yeah, I mean, that's incredible, man. Like you listen, city leads the way I'm not kissing your ass. When I say this, you don't even work anymore, but everybody knows it. Like city leads the way, like finance for salt still leads away. Healthcare has come a long way with you during HISAC. I was thrilled when you went there because, you know, uh, healthcare needed some improvements in that area.

It's just, it's tough, right? I'm not trying to take a shot at healthcare. There's whole different structure. They're like finances in the weed because banks have been getting robbed. If there were banks. So there's a cultural thing. They understand threats plus. That's where all the money is. Basically, health care has always been more about help people sharing, etcetera.

It's a cultural, in my opinion, at least, and therefore getting people to internalize, you know, the threat is harder, right? But I mean, City's amazing. Like they've, they've, they've spent a ton of money too, but they have a fantastic program. They've got [00:45:00] that Fusion Center up in New York. They've got amazing talent.

They do great Intel. They're one of the leaders within that, you know, their ISAC and,

Errol Weiss: are all the successors of what was initially built, right? And tell you, I just remember in the beginning when we started things out in that early time frame, it was, you know, everybody was saying it's, it's, it's impossible to make change around here. It's impossible to change the, you know, the direction this aircraft carrier is going in and then roll ahead.

You know, a few years from there, we had thousands of internal customers that we were working with. We were embedding ourselves into their process. I mean, it was, it was phenomenal. You know,

AJ Nash: And that all started with you not even knowing, and you didn't, you took the job, not knowing what you were going to do, actually, I think, I mean, that's,

Errol Weiss: right.

AJ Nash: that's wild. And I'll be honest with you. So I've had a handful of these prep calls. I recorded some of these, you know, we're getting, getting this off the ground.

This is, there's a thread across our industry. Uh, they're not identical, but there's a thread across these answers so far of people who, you know, either, either fibbed or lied outright, depending on what it was, [00:46:00] or just, just in your case, like just had the guts to go, I think I can accomplish this, 

Errol Weiss: I can it. 

AJ Nash: And then figuring it out, right?

I don't somewhere between there's creativity. There's some boldness across our industry. And I think it's a message that I'm hoping people that are listening are hearing that either, you know, listen, Errol, you're one of the guys I looked up to when I got into the industry, right? As like that, that guy knows what he's doing and you were in that job at the time.

And I was like, that guy really knows what he's doing. And. You know, to find out, it's like, well, yeah, you didn't know what you're doing. You didn't maybe realize you knew what you're doing, right? But you go, all right, don't self select yourself out of an opportunity because that's how people got there.

Sometimes was taking that leap and going, hey, I can do this. I'll figure it out. Listen, I had an interview. I've mentioned this story once before already, but I had an interview where I was asked a question. I did not know the answer to happen to be a virtual interview. And so while I was beginning to answer the question, I also was Googling the answer and, you know, and I got it and I was able to get enough through.

I then went and learned it. I didn't just go out. I'm never going to need that again. Clearly I'm going to need this for the job. And it was a relatively simple thing to learn. It wasn't like rocket science, but you know, that was the creativity. I knew I wanted [00:47:00] the position. I was confident that I could do the work.

And if there was a thing I didn't quite know, I, I can learn. That's what Intel people do all the time. Right. Um, But I think hearing it from somebody like you and, and, and some of the other leaders that I've been talking to, you know, I think that's a message I'm hoping people are taking away, which is, you know, a lot of us leap a little bit further, maybe than, than we think we should, or that we're, you know, on paper documented as capable of, but I mean, where would city otherwise be?

Like if they hadn't gotten you, you were the right guy, clearly look, what's come out of this. The whole tree has been built off of that. I mean, I think that's awesome. I, and thank you for sharing that. I mean, that's, that's gonna be one of those 

Errol Weiss: great point. I, I call it organizational courage. Sometimes have to make to make that those bold leaps, but, uh, yeah, it's it's great.

AJ Nash: I like that organizational courage. I'm gonna actually steal that one and I'm not gonna give you any credit for it either But no, it's it's in it's recorded now. So everybody knows Alright, cool. So listen, I think we're about out of time here Errol. So first, I really want to thank you genuinely For being here, obviously, but also just, you know, [00:48:00] for being a friend and a mentor and and a teammate and a partner and all the things, you know, that we've done together.

I love working with you and I appreciate that as well. But obviously, I appreciate you coming on here and spend some time and sharing a secret along the way, which is pretty cool. Um, you know, we'll work together more. I'd love to get you back. We'll pick up some other topics along the way. I think there's a lot more people could learn from you if I can get out of your way and let you talk and, uh, You know, I'm jealous.

I'm not going to Dubrovnik. Uh, so when you go have a great time. If anybody doesn't know, HISAC is going to be in Dubrovnik for their one of their big meetings, and it's an awesome place that I'll try to get to next time. Um, yeah, I think that's it, though. Thank you very much for being here today and for sharing your thoughts on diversity and on, uh, you know, the importance of building diverse teams and some of these business businesses being diversity more than just People normally think of it as, uh, so we're going to wrap it up for the audience.

Thanks for tuning in today. I hope this was enjoyable and informative and entertaining and helpful in all those things. If not, let me know, throw all the tomatoes you want. And if you really liked it, please tell people. Um, but otherwise, you know, until, [00:49:00] until we're back to have another one of these, uh, discussions, thanks for tuning in.

Look forward to talking to you again soon.

Errol Weiss: Hey, thanks, AJ, thanks to you and the rest of the zero pox team too.

AJ Nash: Yeah. Thanks man. Appreciate it.