If you were called into one of your executive’s offices and asked to explain the difference between Diffie-Hellman key exchange and RSA in non-technical terms, could you do it? As a security professional, that is probably not a problem. Even without too much effort, or math, you could easily help a non-technical person so that they would have a reasonable understanding of why these mathematical functions create the ability to securely conduct business on the internet.
Now, if that same executive asked you to describe which one is recommended in the General Data Protection Regulation (GDPR), or the California Consumer Privacy Act (CCPA), would you recognize that it is a trick question, as neither of those prescribe a specific type of encryption?
Sometimes, all of your technical knowledge needs to be enhanced with the non-technical aspects of cybersecurity. The ability to not only understand important regulations may be beyond the coolest technical skills, and that understanding may be much more important to the business you are protecting.
To learn more about this topic, read our latest article. Read the Article.
Want to Learn More About CISSP?
To discover more about CISSP read our whitepaper, 9 Traits You Need to Succeed as a Cybersecurity Leader.
Or, check out our new CISSP interview series. Discover how the CISSP has distinguished cybersecurity professionals as industry leaders from around the globe through the CISSP interview series.