What do you do if you need to simplify network security concepts for non-technical interviewees?

To simplify network security concepts for non-technical interviewees, use relatable analogies. For instance, compare firewalls to bouncers at a club checking IDs, or describe phishing as fishing where baits (deceptive emails) trick people into giving away personal information. Emphasize the impact of security breaches by likening them to a home burglary, showing the importance of secure data. Use straightforward language and visuals like diagrams to clarify how security components interact. Encourage questions to ensure comprehension, making the session interactive and relatable.

A analogia para explicar segurança são muito uteis para entendimento até de quem é tecnico, entender por exemplo o que é criptografia exemplificando 2 pessoas trocando cartas com a troca das letras por um codigo pre definido facilita o entendimento de como a comunicação pela rede é segura.

Analogies are a good way to make network security concepts relatable for non-technical people. Analogies draw comparisons with things that are familiar to the interviewees which brings them to a place of understanding

Analogies, properly made, can be very powerful messengers to aid in understanding. To explain cybersecurity concepts to our senior management, our CISO uses a picture of a run-down house to demonstrate deficiencies. The image was so effective, it has been specifically requested whenever we have to relate our cybersecurity posture to other executives or agencies.

Siglas são simplesmente abreviações de algo, sempre tive a experiencia se eu queria entender algo e memorizar o que certa sigla significada era só explicar o termo. Exemplo: WAF, Web Application Firewall é um firewall que verificar a nivel da aplicação a permissão ou não de uma comunicação.

Limiting the use of acronyms is advisable because there are so many of them and it could lead to confusion especially if the audience is not too familiar with them. If you are going to use an acronym repeatedly or frequently, its better to state what the acronym stands for first before using it so that there is no confusion.

Diagrams are a key tool for explaining network security. This helps to create a pictorial flow and the illustrations help to breakdown any complex ideas. This can also help to make abstract concepts realistic to individuals

Utilizo muito a ferramente draw.io para criar diagramas que sempre facilitam em minhas aulas mostrar como funcionam os protocolos e as aplicações, criar um diagrama bem ilustrado e exemplificado é um ponto importante para bom entendimento de qualquer coisa.

If you have to get the buy-in of others or explain to senior management the need or why a security policy or measure is required; relating the security measure or concept to a risk works best and can answer questions that they could come up.

Senhas fracas por exemplo são um caso pratico de como alguem pode adivinhar a senha e ter acesso ao sistema, mostrar tambem as soluções para certos riscos é util como se eu tiver um sistema que foi comprometido as senhas o MFA pode salvar de uma possivel invasão.

Executive management doesn't generally speak technology, they speak business, just like the average homeowner doesn't talk about the city infrastructure that supports their home. A key to communicating technology to any audience is to help them understand how it impacts their work and lives.

Sem a pratica conceitos vão sendo esquecidos com o tempo. É importante tornar recorrente a exemplificação de pontos-chaves como senhas fotes, casos de falha, ativação de MFA...

Indeed explaining « Technical Concepts » is a complex/fun challenge. Please find few way that will maybe help you to accomplish this: -Adapt your explanation to different type of audience (E.g:C-Level, Legal, HR, Financial, R&D, etc…) -Highlight what will be improved in terms of business and production, and of course risk mitigation by the integration of new technical concepts. -Try to use analogy with real life (E.g:Car/House). -Do one page architecture with simple wording. -Go straight to the point(eg: better explain was will be « Pros » of using inventory tool than what is SPAN to C-Level. -Do technical demonstration when people see something it stays in mind more easily. Lastly be modest (each one have his level of knowledge).