Here's how you can handle feedback professionally in the Information Security industry.

Those that stop actively seek to learn, adapt and grow in cybersecurity will not succeed long term. This statement is likely true universally across all business functions, but is especially true in cyber due to the pace of change and complexities of influencing change within companies. It isn’t like finance/accounting, where closing the books is pretty consistent over decades. Do some reading and personal growth about developing and maintaining a “growth mindset.” If you identify with the definition of a “fixed mindset”, I can confidently say you career progress may become fixed as well.

Always acknowledge the feedback, even if you disagree. Thank the person for taking the time to share their perspective. Listen attentively to the feedback without interrupting. Show genuine interest in understanding the details and concerns raised. If anything is unclear, ask clarifying questions to ensure you fully grasp the feedback provided. Don't get defensive or try to justify your actions. Focus on understanding the feedback and how you can improve. If possible, request specific examples to illustrate the feedback and its impact. This helps you identify and address the root cause of issues.

Ah, picture this, old chap: "self-resonating vibrotactile instruments" sounds like a bit of a mouthful, but it's simply the most delightful contraption for any budding musician. Imagine an instrument that not only plays music but also feels the jolly vibrations it produces, thus creating a sort of loop-de-loop of sensory delight. You see, as one tickles the ivories or strums the old strings, these instruments buzz and hum right back at you, providing immediate tactile feedback.

Feedback is crucial for personal growth and improvement. Even if you don’t like the feedback, accept it, and decide later how to act on it. Refusing feedback closes the door to improvement. By considering feedback, you’ll gain new ideas and understand others’ perspectives, which will help you improve your processes more efficiently.

Taking a moment to honestly reflect on feedback is essential, especially since mistakes in Information Security can have big impacts. After you get feedback, pause and think about whether it’s valid and relevant to your role. Consider who it’s coming from—do they have experience and understand your work well? Use the feedback to really look at your strengths and weaknesses, and be ready to make changes if they fit with your professional goals. Being honest with yourself helps you tackle any potential issues effectively.

Receiving feedback is one of the most important vehicles for self improvement. Gone those days where we ignore them as an extra task and toss them out! When receiving feedback, we need to pay attention to 3 things: 1- Who 2- What 3- Why Firstly, is where the feedback is coming from. We need to understand the relationship and history of source of the feedback. Secondly, take a close look at the context. Ensure we do understand the message. Even, a negative feedback would have a context. Next is to understand why the positive or the negative! Be honest, put yourself in other person shoes and reflect and learn from the message received.

After coming up with an idea for improvement, always reflect on something that affects others and yourself. Understanding the impact you have on everyone around you is important as it can impact the work and productivity of several employees. Understanding ideas in important feedback to validate are on the same page so everyone gets to the same place.

Nehmen Sie sich nach Erhalt des Feedbacks Zeit zur ehrlichen Reflexion. In der Informationssicherheit ist es wichtig, Feedback auf seine Gültigkeit und Relevanz für Ihre Rolle zu prüfen. Berücksichtigen Sie den Kontext und die Quelle. Nutzen Sie Feedback, um Ihre Stärken und Schwächen zu bewerten, und seien Sie bereit, Änderungen vorzunehmen, wenn sie Ihren beruflichen Zielen und Verantwortlichkeiten entsprechen.

Reflexão! Refletir racionalmente sobre os gaps identificados pelo seu gestor e já pensar e nas ações para atingir a sua melhoria, é uma oportunidade única. Considere criar este mesmo hábito todo dia antes de dormir. Refletir como você agiu durante o dia, e como pode melhorar sua atuação no dia que virá. Tanto no âmbito pessoal e profissional. Faça isso e sua evolução será otimizada!

As mentioned in the other contribution, without feedback you do not have full communications. Full communications includes sender, receiver and feedback which is a constant loop. I have seen most projects or products encounter issues or failures due to poor communications or communications. Sitting across the table watching two people argue but not listening and getting them to realize they were actually agreeing with each other because they were not listening but rather texting to the way in which the message was being delivered rather than listening to what was actually being said. I have always stressed open, honest and constant communications which also involves using the appropriate medium for the message you want to convey.

Open communication is crucial because misunderstandings in Information Security can create vulnerabilities. If something isn't clear, feel free to ask for examples or more details. Show appreciation for the feedback and clearly explain how you plan to address any issues or build on your strengths. This not only shows professionalism but also your dedication to maintaining high security standards. Clear communication ensures that feedback is fully understood and acted upon, helping to reduce the risk of security gaps.

For me, clear communication is essential when responding to feedback. When something doesn't make sense, I think it's important to ask for examples or more elaborate explanations. In Information Security, where accuracy is vital, ensuring there are no misunderstandings is crucial to avoiding vulnerabilities. I am always grateful for feedback and share my action plan to address the points raised, thereby demonstrating my commitment to continuous improvement and maintaining high safety standards.

Eu não diria para se comunicar de forma aberta, mas sim, de forma clara, a responsabilidade pelo que a outra pessoa entende é sua, garanta que ela entendeu, use exemplos, cite fatos e se for o caso desenhe, mas garanta que ela entendeu a mensagem. Mal entendidos podem gerar vulnerabilidades e perdas criticas no quesito segurança.

Offene Kommunikation ist essenziell, um auf Feedback zu reagieren. Fragen Sie nach Beispielen oder tieferen Erklärungen, wenn etwas unklar ist, um Missverständnisse zu vermeiden. Drücken Sie Ihre Wertschätzung aus und erläutern Sie Ihren Plan, um Probleme zu beheben oder Stärken zu nutzen. Dies zeigt Professionalität und Ihr Engagement für hohe Sicherheitsstandards.

Transforming feedback into actionable goals is crucial in Information Security, where precise actions can prevent breaches or mitigate risks effectively. Set clear objectives based on feedback, identifying specific areas for improvement. Create a plan with measurable milestones, whether it's enhancing technical skills or improving communication with your team. Concrete steps enable you to track progress and stay motivated as you work towards enhancing security measures. Thanks for emphasizing the importance of turning feedback into actionable goals in Information Security.

Setting up actionable goals is extremely important post analyzing feedback. Always recommend to follow/target SMART goal strategy. S --> Specific. A goal should always be specific and should answer basic W's What do I want to accomplish Why is this goal important? Who is involved? Where is it located? Which resources or limits are involved? M --> Measurable. This will answers H's based on W's above. How much? How many? How will I? A --> Achievable. Do you have the time and necessary resources available for action? Can you afford to do it? R --> Relevant. Is this the right time to complete any additional training to achieve the goal? Does this match with other priorities on my team? T --> Time-bound. When can i start and end?

Are you looking for a new OKR? Using the feedback may just be the spark you need for a new OKR. Remember, improving your own skills only strengthens the team if you set the example and share your experience strengths and insights.

Verwandeln Sie Feedback in umsetzbare Ziele. In der Informationssicherheit sind klare, präzise Maßnahmen unerlässlich. Identifizieren Sie spezifische Verbesserungsbereiche und erstellen Sie einen Plan mit messbaren Meilensteinen. Ob Sie technische Fähigkeiten verbessern oder die Teamkommunikation optimieren, konkrete Schritte helfen Ihnen, Fortschritte zu verfolgen und motiviert zu bleiben.

In my case, I have worked for many years with the SMART methodology, it has helped me establish clear and realistic objectives, it is a good model to transform the feedback received into an achievable goal.

I see feedback as a treasure map pointing to learning gold. When I was new, a colleague's feedback led me to a training course that boosted my skills. Stay updated on trends, and you’ll turn feedback into superpowers for your digital defences! 🚀🔒

The cyber / information security industry moves too fast to not be embedded in new learning and education. Anyone in this domain should subscribe to several dozen relevant newsletters on topics related to security and some that are not to gain a fresh perspective, analyze important case studies, understand evolving best practices, research regulatory changes, and know the latest news.

Continuous learning is so important! Take trainings using platforms like TryHackMe, Udemy, Coursera, and more on areas where you are told you need to grow!

Não tem como deixar de aprender na temática de segurança da informação, já foi o tempo que bastava criar algumas regras de firewall e estávamos protegidos. Hoje não precisamos apenas saber criar essas regras, mas precisamos obter conhecimento de negócio, legislação a nível global, gestão de riscos, frameworks de mercado e mais uma tonelada de outros temas técnicos. Ao meu ver o ponto chave é entender como a segurança da informação pode contribuir não apenas para mitigar risco, mas para incrementar negócios. Estudar é um ponto chave, feedbacks dos resultado que se obteve até o momento é outro caminho, pois o feedback tem o poder de ajustar a rota.

Embracing a mindset of continuous learning not only helps me address the feedback I receive but also prepares me for future challenges. It demonstrates my commitment to personal and professional growth, ensuring that I remain a valuable and effective member of the information security community.

Il est plus facile de critiquer, juger, rabaisser, insulter derrière un écran. Nous devrions communiquer avec le même respect que ce soit face à face ou derrière un écran. Ne soyez pas comme les automobilistes qui se transforment derrière un volant ... ; )

The important thing here is, be an adult. You are getting feedback meant to improve your skills and interpersonal skills. Remember, it's not an attack. Listen, ask questions, and maybe even say that you don't see it the same way and discuss what you might not be seeing from an external point of view.

Bewahren Sie Professionalität im Umgang mit Feedback. In der Informationssicherheit ist es wichtig, ruhig und reif zu reagieren, Emotionen im Zaum zu halten und sich auf den Inhalt des Feedbacks zu konzentrieren. So bauen Sie Vertrauen auf und etablieren sich als zuverlässiger Sicherheitsexperte.

Maintain positive Attitude - Approach feedback with an open minded - Recognize that feedback is an opportunity for improvement.

Maintaining professionalism in cybersecurity means being the shield of digital trust. It requires unquestionable ethics, continuous expertise and resilience in the face of adversity. In a world where every byte matters, integrity and competence are the anchors that support cybersecurity, protecting the most precious assets of the digital era: the confidentiality, integrity and availability of data.

Especially with senior leaders, there can be a fear of listening to feedback because they assume they are expected to take action and they don't intend to commit to doing that. The fact is you can listen, honestly thank the speaker, and then move on without committing to any action whatsoever. Sometimes people just want to be heard. Sometimes they are asking for action but that doesn't mean you're obliged to agree to their request. Even if you have no intention of taking action, among the honest replies available to you are to thank them for their input, for their perspective, for their candor, for making the effort to express themselves, or for taking the time to bring something to your attention. Remember: Zero action required.

To create a comprehensive actionable plan from feedback, prioritize the feedback based on impact and urgency. Set clear, measurable goals for each area, ensuring they are achievable and time-bound. Develop a step-by-step plan detailing actions needed to reach these goals, including acquiring new skills or adjusting current practices. Establish a timeline with specific milestones to track progress. Identify necessary resources such as courses or mentorship, and allocate them effectively. Define clear performance metrics to measure progress. Schedule regular check-ins with a supervisor or mentor for support and adjustment. Continuously reflect on the effectiveness of your actions and be open to adapting your plan based on new feedback.

Always be humble and listen to your peers and direct managers. In a performance driven environment every voice/idea/solution matters.

I have supported many companies, and there is a duality between the sectors that matter most, between the IT sector and Compliance. In some cases the IT Sector thinks it is not their responsibility, however, generally when the CEO hears the word "data" it links it thoughts directly to IT. However, for there to be more effective information security, it is necessary to integrate all areas, clarifying that the IT and Compliance Sector will not be able to monitor everything all the time, because it is not the responsibility of these sectors. Therefore, there must be a dissemination of culture and knowledge about the responsibilities of each area.

Listen (really) to what you need to improve and equalize your strengths. Never stop crossing the data with other people-oriented models (Barrett, MTBI, etc.) to recheck the output/info received.