Well, first of all, I'd like to thank all of you who are here, all the people who are following us on streaming, and of course, I'd like to thank the organization, here at CIBE, for having me to be here at CyberCAN.
It's an honor for me and a great responsibility after seeing all the great people who have been sharing here, both on a technical and inspirational level, a lot of things.
So, thank you in advance.
And let's go on with the talk.
The title may sound a little pretentious, because I'm talking about cybersecurity, it's for me, it's not like I'm talking for myself.
But the idea I want to put in this title is to think that if I can say that cybersecurity today is for me, and now we'll see how I came to this conclusion, that you also end up thinking that cybersecurity is also yours, that it's for each one of us.
So, the title may sound a little pretentious.
Let's see if it works in the distance.
It doesn't.
Is this the one they told me it was?
Yes?
Okay, I'm ahead of the game.
I've gone further than I should have.
Ceresade had already done the presentation.
I have a degree in journalism, that is, a person of pure letters, who is here in an environment where cybersecurity is being talked about, so it's a little shocking at first, to think that it escapes from the technical part, and how a journalist, a person like me,
has ended up a little bit in this world.
But, well, being a journalist, I have realized the importance of this topic, and every time I have been much more entangled in quite technical issues, and that's what we're going to break down.
So, I have not only stayed in being an assistant and learning from all this ground, but I have also gotten entangled, and as I said in the presentation, I have also gone to the other side of putting things in motion that can serve the cybersecurity community,
elaborating a security day, a hack and beast dynamizer, and undertaking many of those things.
So, well, what am I going to tell you?
Well, let's say the three big parts in which I have divided the presentation.
As it is an inspirational talk, it will be to talk about how I got here, that is, to tell my personal journey to see the steps I have taken.
Also, the need there is, it is my particular vision, and I contemplate it like this, that cybersecurity is something multidisciplinary, that is, to professionals from different disciplines it is something that has to occupy us and worry us.
And, finally, also to see the professional competences that are in demand today, within the field of cybersecurity, but that can be extrapolated to any field.
Professionally, what competences are being demanded?
So, let's go there.
Here, the reference has a reason, but many in the room, due to their youth, you may not know very well who he is, this character that appears here, the elders of the place, like me, but you may have the reference, Paco Martínez Soria, an actor who left us great films including a film called La Ciudad no es para mí.
And I wanted to make that allusion between the title of his film, La Ciudad no es para mí, and the adventures that it conveys in this film, to La Cyberseguridad sí es para mí.
I have played with that parallelism in what is in the title.
But, of course, between Paco Martínez Soria and looking for a relationship with me, it is a bit shocking.
What relationship can there be between the film and a person, in the 21st century, a journalist, who ends up entangled in the world of cybersecurity?
Well, because in the film La Ciudad no es para mí, Paco Martínez Soria, in this character, is a person who lives in the village, and when he becomes a widower, he goes to visit his son, to Madrid, to the capital, to a context that he does not know, that was totally unknown.
He sets out to go to the big city, to live some experiences that he had not experienced and did not have a context.
And he ends up, in the film, transforming the environment a bit.
When he arrives in that city, he brings a lot of things, although he does return to his origins, he returns to the village a bit.
But, well, he arrives, as I said, to a context in which he was not used to.
He arrives to the big capital and great things begin to happen.
And looking for the parallelism, Paco Martínez Soria becomes practically like me.
When I entered this world of cybersecurity, I was also a bit like Paco Martínez Soria, because I entered this world.
And where I went, with my phone and my tripod, I went to different places.
And finally, well, yes, a journalist in the field of cybersecurity, which is usually quite shocking, this kind of things.
And, as I say, in that context, without having much idea of everything that was the subject of cybersecurity and very well where I entered, I went to that unknown world, a bit misplaced, like when Paco Martínez Soria arrives to the city, when he arrives to Madrid,
a bit misplaced in the world of...
well, in that technical environment and in the community.
But, well, little by little, I started to lose that fear and to see and to explore what the field of cybersecurity offered or what it could offer for a person like me, curious by nature, and a journalist.
With which I have been accumulating, and not all of them, different conferences, security events, in which I have attended, in which I have participated, or in which I have organized.
Not all of them, because there are times when you want to cover, it is a piece of the many in which I have already been.
But, well, there came a great day in which I posed myself, without having knowledge, in person, already in the world of cybersecurity.
Because I had lived it before through YouTube, organizing different conferences, but to move and take the step to go physically to that environment, to meet professionals face to face, it cost me a lot.
And there I go, and I keep going, with my basket, with my backpack, with my mobile phone, and with my tripod, to record the different events.
And I have to say that this path, this transition that I have made in a totally unknown world, has not been easy, but to this day, I do not change it for anything.
And, obviously, it is a path that is in transition, that has not stopped, that has not finished, much less, and that has several stages.
It has the observation stage, and adaptation, in which I totally felt Paco Martínez Soria, in other words, not in front of people, but internally I was living it in that situation.
I felt like in a world out of place, in which I had to get used to, little by little, the learning stage and the emotional stage.
But these are stages that I still live, and that I will break down little by little, so that you can see that possible identification, that you can also feel, people, that you are getting closer, maybe this is your first event, maybe you have attended CyberCAM for the first time,
and maybe some of you are feeling that you are entering something that sounds a little bit unknown, but little by little you are gaining.
So, my observation stage and adaptation has been like a leap into the void, without a network.
I entered little by little and without a network, there was nothing behind it.
And when I entered this world of computer security, without having, beyond the basic knowledge, I entered like in an abyss, in the sense that I entered a world of computer science that, no matter how much I have studied, I have always been very curious and I have liked technology a lot,
but I was still a basic average user.
The subject of computer science, the subject that they talked about hackers.
It was like, where are you going to get?
Exploring.
And women.
Are there women?
You had to enter this observation stage to see all this kind of things.
And how did I face this stage?
Well, trying to break myths.
Totally breaking myths.
Of the things I have told you, I have been entering little by little in this field breaking myths.
The first of them is computer science.
As I said, I am a medical user with advanced knowledge, but I did not start from there.
I do not have a technical degree.
I come from pure letters.
I have not studied a technical degree to be able to move through the cybersecurity community and understand things.
I do not know programming languages either.
It is the thorn that I have stuck for lack of time not to get into that topic.
But to talk to people about cybersecurity, beyond that they understand a lot of zeros and ones, when it comes to communicating, we can do it.
I mean, I have communicated perfectly with them.
I have understood their language.
I have tried to transmit it to people.
I have not had the vital need to know programming languages to enter this world.
Little by little, I have been discovering many more things.
So, I was breaking a myth.
I mean, I knew about Media Informatics, but I have not needed to have that technical career, nor those programming languages knowledge , nor have I started to strip any computer.
At least, for now.
And I am here.
And nothing has happened to me.
But it is a little thorn, I say, the topic of programming, yes, for lack of time, but I have not needed super knowledge, a computer engineering, a computer science, to relate in this world.
I had to discover what was happening with the hackers.
Because I was entering a world where hackers were talked about.
And it is always said that the reference of the hackers is that figure, black and dark, that characterizes to be the hackers, that are the bad guys of the movie, when it is the opposite.
We have to discard this.
Because the hackers are not at all a computer pirate.
We had to break the myth of the hackers.
And as I have been knowing many hackers, more I have broken this myth.
Because it is like this, ok?
A hacker does not stop being an expert who tries to surpass himself.
And this can be extrapolated much beyond the technological and computer field.
A hacker is associated with technology and computer, obviously, but also anyone within their profession can be considered a hacker in their profession.
Ok ?
There are mechanics who are great hackers, setting up any car and taking it and transforming it much further.
And in any other profession as well.
So we have to discard these myths and put the hackers truly in the plane that they are, that they are experts, experts in what they are doing.
And of course, when we see those big headlines and here it is throwing stones against my own guild, against the media, because when anything happens, which is when we really agree in the media, by general rule, it is like this, of cybersecurity, it is still cataloged as the hackers of the bad guys.
And nothing further.
When someone commits a crime through the network, we are going to start calling them cybercriminals, which is talking with propriety.
Let's not load the ink against the hackers, because against what is said to be the bad guys of the movie, on the contrary.
If today we have a large part of security, it is thanks to the daily effort that these people make , these experts working, so we have to respect the hackers much more.
In fact, to start with this, we have to respect the hackers so much that the Royal Academy of Language until recently, a year ago, it is going to be now, only had one section of the word hacker in the dictionary of the Royal Academy of Language, which spoke about computer pirates.
Because the Royal Academy of Language collects the use we make of the different words and puts them in the dictionary.
It is not that it defines them like that, but it is the use we make in most of society.
And a little battle was won last year, in which, together with in that definition of hacker associated with computer pirate, another section was put , which spoke about a person expert in computer management who takes care of the security of the systems and of developing improvement techniques.
We have already won a little battle, but at the same time in which these two words, these two definitions, together with hacker, appear together, not everything is solved.
Because we have to try to erase the computer pirate definition, because if the two definitions are together, when someone comes to a dictionary and says, this is about hackers, what are they?
When that dictionary comes , two totally contradictory definitions are found .
Therefore, we have to erase the computer pirate and leave it in an expert person.
It would be necessary to nuance that definition to accommodate everything, but if we use the word properly, all the society will earn the respect that hackers deserve, whether they are experts, professionals, because nowadays, I have traveled to so many places and I have met so many people from the community,
all these people that I have been meeting are many of them who are cataloged as hackers and not at all.
All these people that I have met, who work in different...
well, they have their different functions, here, they are where the hackers are, this present and this future.
That's where that talent is, those experts, and if we are denigrating the word hacker in many occasions, we are loading the ink against these real professionals.
That's where the real present and future of cyber security that we have in this country ends .
So, we are going to start changing, just like I broke the myths and I saw, well, computer science, you have to have knowledge.
Well, it's not like that, I can enter this world without having the technical knowledge.
The hackers are not the bad guys, they are people to whom it is very important to know and let this myth And the third myth that I had to break was to discover if there were or there weren't women in cyber security.
Obviously, I'm not going to deceive you that when we attend different events of cyber security, both on the side of the lectures and on the side of the attendance, I wish there was the thing balanced.
It's not like that, there are more men than women.
But it doesn't mean that there are no women.
There are women in cyber security and we have to do because there are many more.
But how can we do so that there are many more?
What we have to do is to think that technology is not a matter of gender.
Technology is not a matter of men or women.
We are more trained men or women to face technology.
It's not a matter of gender.
It's a matter of doing and whether you like it or not, and that's it.
But we have to get rid of this idea.
And it's true that what we have to do to win more people who come, many more women, many more girls who develop this vocation is to give them normality and take advantage of the same opportunities that are offered to both men and women and that we take advantage of many more to give that visibility saying that there are women in cybersecurity and that we can improve those obstacles that stop from coming as an assistant to coming as a speaker and show what is done in the day-to-day because there are very valid women in this.
So we should also support each other.
I have found very few women in the events I have been to, but that doesn't mean that there are no women in cybersecurity.
I have found many women in cybersecurity and there, truly, there is a lot of female talent in cybersecurity working from different areas.
And this has to be strengthened.
For what?
So that girls if they really have a vocation for this don't lose it for thinking that it is not a girl's thing.
They lose it because they start to like something else.
But not because they think that this is a totally masculine field and that they don't paint anything.
If they have a vocation they have to develop it and support it.
But support it taking advantage of the same opportunities and giving visibility to all this kind of things.
Okay?
Well, I said that it was the observation stage.
How did I get closer to this?
And it was breaking down those myths.
The learning stage starts but never ends.
I mean, this is not in transitions of that stage.
In adaptation, I have already adapted and I adapt more every day.
But the learning stage is where it starts the day I was born.
And I hope not to lose that desire to learn until the day I die.
Because I have always said that the day I stop learning it is not worth being here.
Learning in any field I expand it a lot in my life both in the personal field and in the professional field.
Okay ?
And this stage is that I always characterize myself as a person who defines me as an eternal learner.
In fact, in my biography on Twitter is what I also have.
I am an eternal learner and I get carried away by that curiosity.
Curiosity in different areas.
So, I had to face this learning stage of a journalist who entered in a world of cyber security that I had to understand little by little to know and find that place in there.
So, this learning stage I have been overcoming, learning and providing value from my point of view and in the measure of my possibilities.
Okay ?
There is no limit in learning .
How did I start entering in this world that was totally unknown to me?
How did I lose that innocence of arriving to this community and going a little...
well, getting to know many more things?
How did I go taking those steps that Paco Martínez Soria took in Madrid and I took in the cyber security community ?
Well, first of all, assimilating the technical vocabulary.
Because, at the beginning, when the most technical to talk to me , I got from 4 to half.
Now, maybe I get 2.
I didn't say that I got 4.
I got 2.
But I put the interest to keep getting.
Because, if I don't understand that technical language, it is much more complicated than in the dissemination facet that I intend to bring with journalism to bring cyber security to everyone.
If I don't get that technical language, I have it much more difficult to do transmission mail and that, the way to explain it, this cyber security can cover and reach many more areas.
So, I have to try to assimilate that technical vocabulary little by little.
I mean, I got a little bit more, but, some things still escape me.
But, I have to assimilate it.
Learn from experts from different areas.
I love to surround myself with professional people and that they know about anything.
Because, I will always learn something.
And in the field of cyber security, it is so broad and so big, there is so much to absorb from so many different experts that I love to surround myself with them and learn with them.
I mean, that is a base that you always have to assimilate to try to surround yourself with the professional that, even if he seems more disparate than what you are doing.
Because, he will always leave something good in you.
You always have to learn.
And that is what has brought me a lot.
To relate, to talk, to talk, to attend, to take advantage, to listen to many lectures, many videos and all that.
To do some online courses that can also be done, to read a lot of articles, to watch a lot of videos.
And that is how you learn.
You learn from all this, ok?
And attending many security events.
At the beginning, in that photo that I put, which was a bit of compilation, are different events in which I have already attended, although I said that they were not all.
And in the security events, you have to go and you have to take advantage of them.
Not only listening to the users at the moment, to the speakers at the moment that a talk takes place, but to take advantage of the context that any security event offers , to be able to approach that speaker and speak.
And not only to the speaker or the speakers who come to the different events, but the people who are around, those who right now have you sitting around you, have very important things to contribute.
That is why it is so important to take advantage of the networking moments to relate not only to the speakers who have come to transmit their knowledge, but to many others who could be perfectly speakers and come here to transmit their knowledge.
So we have to take advantage of the security events and go to those who can, and if not, follow them online, like those who are following us who have not been able to be physically here.
So we have to take advantage of all this, and always be in sponge mode, or at least that is what I always do.
And at this point of the learning stage, how do I try all this that I have been absorbing from the world of cybersecurity?
How do I try to contribute and put my grain of sand in this world?
How do I try to contribute and put value from my point of view as a journalist and cybersecurity disseminator, which is what I have ended up being?
How do I contribute value?
Well, an important part of contributing value is giving voice to the real professionals, to those experts in security that I gather in my channel.
The word of the hacker on YouTube, in which, for example, cyberdebates live or through the different talks to the events that I attend.
I go, as I said, with my mobile and a tripod and I record it and I edit it as soon as I can and then I put that material available to everyone open, through YouTube, through the podcast channel, so that that knowledge reaches people.
So, what I do is, with that platform, I give voice to the real professionals so that we all try to carry cybersecurity in a language that everyone understands.
So, that is a little point where I try to put value.
How else do I try to put value in this world?
Well, as I said, not staying alone in the field of being an event assistant, but a person, a journalist, not a technician, ends up, also, pulling the blanket over her head and organizing security events.
I am the founder and organizer of the PaellaCon that, during two editions, we have been able to do in Valencia.
This year, for different personal reasons, I have not been able to carry it out, but there it is, to continue developing it.
And they are free days in which it is open with its technical workshops, with its technical talks, with its track for families, to cover everyone.
Also, dynamizer of the Hakanbirs community in Valencia.
Hakanbirs, which I hope many of you know, which are also events, free talks that are offered in different cities of Spain, in a relaxed environment, in which, later, that networking moment is enjoyed with a beer, or without the need of a beer, and it is enjoyed there transmitting knowledge,
sharing knowledge.
So, I have gone to that point of being an organizer, not just being an assistant, but putting value to the community organizing events so that more people like you have the opportunity to attend or give talks and to project that knowledge.
And, the other third part in which I try to put my grain of sand and contribute by putting value is from the part of the training, as a freelance trainer or also I have been a trainer in the school days of INCIBE and I am also a cyber-cooperator, so I try to put value by giving many talks,
many workshops of training, of digital security, of privacy, bringing all this in the field of awareness to everyone because it is necessary that from cybersecurity we realize that this interests us all.
It is not a question of technical education or it is not a question of attending events, it is a question that cybersecurity is present in everything and we must take well, awareness of all this field and among all disseminating information in digital security and in privacy trying to achieve a safer Internet for all.
And for this we have to get down to the mud and train people and train people from the basics but we have to start because we are still in those levels of finding many people that we have to start from the basics to reach awareness in this field.
Ok ?
And the emotional part that I said that is always well, the emotional part is very present in my life and I will never lose it.
I am a person that lives everything very intensely.
So, in the emotional part also in this journey that I have done it has been a journey of finding my moment of personal growth and in all that knowledge that I have been given by the different experts that I have joined well, I have tried to carry it out obviously giving thanks for all that knowledge and with the humility of approaching a totally unknown field and with that humility of learning and absorbing.
Ok?
So, it is my gratitude and having the strength to continue because there are times that getting into a field that is totally unknown for you well, it is not a rose path.
We are not going to deceive anyone.
So, we have to have and find a point of balance.
And for this, in this path I am trying I am not trying, I am achieving it because I enjoy the path.
I don't have a purpose to get to a place but my purpose is to enjoy each day in that continuous learning.
So, I enjoy the path.
And the emotions we have to learn and deal with the good and the bad.
Why?
Because when you get into a sector that is totally new and you start doing things as I have said doing things or for example to put through my YouTube channel of Palabra de Hacker when you start doing things to transmit knowledge which is the main function for which the channel is launched when you start doing different things in a community in which you land as new it is not always so easy.
I have also had to face situations that have not been so extremely comfortable but I have had to face them because sometimes as I say it has had to be the price of informing about cybersecurity because you also have to pay it in some areas.
Obviously, the criticisms come and when they are constructive you have to learn from them.
When they are critical to criticize you have to learn to ignore them.
But in this field of learning I have faced situations that are not as comfortable as maybe facing after having done a live I have faced that massively false followers would enter my Twitter account to try to block me with which I have had to report and deal with all those followers that someone wanted to buy false followers to block my account or do a live cyberdebate a day dedicated to the 2 attacks to explain to people the importance that these attacks have and that they are used as a way to pressure many people or a threat to companies,
etc.
and that someone during the live did not achieve the purpose because the debate being done through YouTube was not the purpose but a 2 attack was launched by chance against the server where I had and other websites and they launched a 2 attack and for a few hours it stopped working but the live went on because the live was done through YouTube so there have been things that when I have reported about some things I have faced small situations that I have had to deal with like in other situations but you have to move on nobody said that it was easy to find criticism that are not There are also constructive comments,
but if I have to choose one, and it's something that motivates me every day, it's to find many comments from many people, many of them in a public way, and many others in a private way, from people who find value in the things I do, in the value I try to bring to the community.
And that's what I choose.
Here, there is a small selection of things, of totally public comments, that are through the networks or through the channel, of comments made by people, that make all the effort I put in this kind of things, worth it.
People who are finding value, the ones that are disclosed in these cybersecurity topics, and that put value in this kind of things.
So, these comments are the ones that make me find daily fuel to continue in this field, or trying to continue bringing that value that I have been commenting.
Okay?
And if I have been able to do all this, and put my humble grain of sand, what can't you do?
Each of you will have a motivation to be here, to be interested in cybersecurity, to discover cybersecurity, to work in cybersecurity.
I am convinced that if I have been able to do this, you will be able to do much more.
You will also be able to find your place in cybersecurity, starting from different fields, because each of us has our own personal experience.
And this is so important, because I consider that cybersecurity is something that competes for all of us.
Cybersecurity must be something multidisciplinary.
This is not just a matter of technical staff.
It is very important, it is integrated.
Computers, technicians, where it includes everyone, is the base and it is important, obviously, to start many things, but without the work of any other type of professional.
And there are a number of positions, but well, in the category of others, it includes everyone who cannot be represented in those different professionals that I have been indicating.
Cybersecurity is something that must compete for us to the forces and bodies of security of the State, to educators, to analysts, to lawyers, to all the legal part, lawyers, judges, prosecutors, notaries.
You have to know about this kind of thing.
Before, in one of the talks, or in one of the workshops, I think it was, in Manu's workshop, they were saying that all the evidence that is taken in a forensic expertise, in the IOT devices, then how was it transferred to a judge?
So that they understand it and assimilate it.
Well, maybe the basis is that those judges, prosecutors, lawyers and all the others, we have to recycle in that field to understand, we have to train ourselves a little to understand how the cyber world moves nowadays.
So cybersecurity is something that belongs to all of us because, in the end, what we intend is to fight against the truly bad guys, those who can be represented through this spider drawing, those who could be cybercriminals and totally bad guys.
So all the professionals, we are the ones who have to work from the different areas, pushing everyone to get this to move forward.
If we don't put a little bit of everyone's will, then this is going to go totally wrong.
Because the technical part is not enough.
We have to have a regulation and the lawyers and the prosecutors have to know where they are going.
And the analysts and the journalists, we have to start to know the field of cybersecurity, what it consists of and inform not only when a WannaCry appears or things like that, but inform in the day-to-day, put those awareness campaigns so that people wake up,
that security and users, what is going on.
Because nowadays, I miss that there is not a national campaign in which digital security messages are being launched.
Just like a few years ago, the first traffic campaigns were launched and people were told that they had to put on their seatbelts.
And today, in traffic campaigns, we are still reminded of the importance of putting on our seatbelts.
And whoever wants to go without a seatbelt is still going.
And not because of the fine, but because he is a little bit drunk, because you can have an accident and you have many more possibilities of having much more serious consequences than if you do not wear a seatbelt.
Because nowadays, I miss a national campaign in the big media.
A well-structured campaign that reminds people the importance of having their password, that they have to change the password and the key of the router, that they have to cover the webcam, and that kind of things, of basic awareness and that should be done,
because we are asking that people pay attention to things, well, quite high, when they are failing in the basics, but out of ignorance in a large part.
Then there will always be those who, even knowing it, get distracted and do not want to pay attention.
That is always going to happen.
So, we have to realize that cybersecurity is something multidisciplinary, that we all have to row in this direction.
We all have the need to know and acquire knowledge in digital security.
That training is not enough.
We can come from a more technical part or from a less technical part, as is my case, but we have to have some knowledge that brings us closer to how cyberspace moves nowadays.
Knowledge that is part of our day-to-day, of our environment.
We are very technological and we have to know.
And, in fact, nowadays, professionals from different areas, who have already demonstrated enough, and others are starting, that interest in cybersecurity, at the moment, those professionals who are from other areas, but who have an interest, a training,
a knowledge of cybersecurity, are also becoming highlighted.
It is a differential point for them.
A lawyer, nowadays, who controls all these issues, has a much more important starting position than someone who stays structured and doesn't want to leave 1 plus 1, 2, and from there you don't get him out.
And we all move in the virtual field, so there has to be different professionals from all areas that we focus on this field and learn.
And, well...
Having said all this, cybersecurity is obviously not a trend.
It seems that, lately, everyone is talking about cybersecurity and this is making us see that this is like...
Knowing about cybersecurity is a trend.
And no, it doesn't stay in a trend.
Cybersecurity is here and it will stay, because it is the environment in which we move, as physical security will always be present.
And it is obvious that we need prepared people, it is obvious that we need passionate people, and it is obvious that we need talented people to work in cybersecurity.
But there are.
These people, many times, we are told that there is a long way to go, and there are.
There are these professionals.
And, sometimes, when it comes to cybersecurity, and it is mentioned in so many channels, and it is said that cybersecurity is like a trend, in this field there are many siren songs, and many people, I don't mean the youngest, mainly the youngest, but anyone who wants to approach or feels curiosity in this field begins to listen to many siren songs about cybersecurity.
There are so many experts missing, we have to motivate people, we have to do this kind of things, obviously.
We have to do all that.
But there are times when, among all those news that are out there, and I go back to it, among all those news that stay in the press, and that come out, and that invite us to see headlines like these in which we are told that the absence of talent and training in cybersecurity worries us,
and then it is remarked that they are missing, well, it depends on the newspaper you publish that day.
It depends on the newspaper you open that day, you can find that they are telling you that in the very, very, very short term a million professionals are missing, a million and a half professionals are missing, two million professionals are missing, or we are already going to the next year,
we are in December, it is predicted that in 2019 in the world between 5 and 6 million experts are required.
From 1 to 6 million, it depends on the newspaper you open that morning, you can find that you say, I have many possibilities, I have all the possibilities in the world, or this is for me, indisputably, to let you be led by these headlines.
We would be wrong.
The people who can be led by these headlines would be the people who can believe that cybersecurity is a fashion, and it is not a fashion, cybersecurity is something to stay, but we do not let ourselves be led only by this lack of talent, according to the headlines,
For example, in college, they taught me that when you put headlines in five columns, it was practically that a catastrophe had happened, totally, I mean, it was like a headline, opening a cover, of course, one already has a few years, then the cyber part was not there,
it was the newspaper on paper, the one that today is almost gone, and they told you that opening a cover, or in the intermediate pages, in five columns, that day you had taken the star report, but because it had happened, I don't know, an hecatomb, or a super extraordinary thing,
and today, in online headlines, and in the press, the one that is written, that will continue to resist, because there has to be written press, however, we find headlines in five columns, to highlight any kind of news, and we have to balance this thing,
because the siren songs, can let us go, because then we find things like, 82% of companies say that they are hacked because of the lack of talent.
And, of course, my eyes are a bit like, boom, boom.
And I'm loading the tape against the journalists, but from the beginning, in the world of cybersecurity.
Why?
Well, the journalists pick up what the companies say, or what society says.
82% of companies say that they are hacked because of the lack of talent.
And then we are told, in the subtitle, due to the lack of prepared talent to fight cyberattacks, 9 out of 10 companies think that machines can solve these tasks better than humans.
We come from being told that there are between 1 and 6 million people in the world prepared for this, and in the next subtitle they are telling us that 9 out of 10 companies think that machines will handle this better than people.
Not so much, not so little.
Not one thing, not the other.
If companies are hacked, it's not because of the lack of talent.
It's probably because of the lack of means.
And because of the lack of spending and investing in having many more professionals to secure.
Some companies, who are working in security, may not do things as they should, but 82% are not hacked because of the lack of talent, they are hacked because of the lack of budget, possibly.
So we have to take into account many things that are happening out there.
Ok?
And despite everything, it doesn't matter that in those headlines we find the Baremos between 1 million and 6 million and if they had continued to investigate, I don't know until what number those headlines would have reached.
Probably many more.
But yes, it's an obvious thing that nowadays technology grows so fast and it's...
they need to cover many jobs because it advances very fast and many things.
But we don't know the Baremos exactly.
It can't be balanced in a few years' time all the people that you are going to...
that you are going to need.
Because then the rate of people that is right now would be a rate of unemployment of 0% in this field.
And it's not.
There are also unemployed people in this field.
Now, the people that are good and that, yes, they have many opportunities.
And this is a good time if you really like this and it's your vocation, whether you are boys or girls, as I said before, it's a good time to train in security.
But the demand of professionals is not going to exist forever.
If right now those headlines are talking that there is a very big demand and then things are going to be balanced.
I mean, there will come a time when the offer and the demand will be balanced and it won't be so disproportionate.
It's a good time to study if you really like this field.
But it's not necessary in the technical part.
In any part, as we said, which is multidisciplinary, you have to get into cybersecurity.
And the fact that we are in the starting point that can position us better or worse is that we have to try to stand out as professionals to cover that position.
But really, I hope that there are companies and organizations that are able to cover that great talent that does exist, not only in our country but in any country.
But in Spain, there is a lot of talent and we have seen it before.
So, I hope that companies and organizations are able to cover all this.
And to be able to cover these positions, you have to learn to differentiate.
The people that are starting or studying or you are going to face your first job or not the first one at work, but if the first one is in cybersecurity that this can be covered or in any other field, you have to try nowadays to do a series of things to try to distinguish and,
well, that among all the selection of those professionals we can be the chosen one.
You also have to stand out in that field.
Ok?
And what are the basic professional competences that must be added to the knowledge that we already have?
The knowledge that we already have we start from the basis that those knowledges fixed or self-taught because in this world there is a lot of self-taught.
I am an example of this without being technical.
I had to put the batteries, as I said, in all that field in a self-taught way.
Regardless of those knowledges that we already have, be some or others, we have to try to stand out from the rest, be in cybersecurity or I speak of any other area, trying to contribute a series of things that nowadays are more demanded because of the functioning that exists of the different jobs.
Today we have to be more trained to be able to face a team work.
Here in CyberCAM we have seen how people do work in a team.
In the hackathon people were participating for X hours to develop well, they were developing the different applications and such to see a little in the competition and they were doing a team work.
Or yesterday the youngest in CyberOlympics were, those who had qualified who came here to the phase in a face-to-face way, they worked in a team to take forward those challenges that were put in front of them.
We have to be trained to develop a team work that allows us to work with professionals from different areas, that we are able to understand each other with professionals from different areas.
Not only I, a technician, with the technicians.
I, a journalist, with the journalists.
No, we have to try to work in a team of different disciplines because in this way what we are able to take forward will be much better.
And for this there is nothing better than to demonstrate to have initiative.
But this you have to address in your life in any field, in the personal and in the professional.
Today you have to have initiative, to want to do something, to motivate yourself to do something.
Here we talk about cyber security but you have to motivate for whatever, but to have initiative, to be willing to do things.
And the development of creativity and lateral thinking.
It is very important that any professional nowadays tries to go further.
And in the face of any challenge that comes up, of any problem, of anything they have to face in their day-to-day, to go with a thought of trying to see where no one has seen before.
And to try to think things in a different way.
So these are important competences nowadays.
But whether you are in cyber security or journalism or you are lawyers or you are nurses, these are competences that we must have already absorbed.
And the communicative are also quite very important.
Not only the oratory to try to make you speak in public with people.
And when I say oratory ability or ability to speak in public, I don't mean that everyone has to take the step that, hopefully, we have to take, of being up there communicating and transmitting to people, but dialogue ability.
You will be communicating in a verbal or written way with a lot of people.
And you have to have the ability to communicate and know how to write.
There I put the know-how to write, good spelling and grammar, that which has been lost.
So this goes a little further, but you have to know how to do this kind of things.
And to show empathy.
Empathy is the ability to put ourselves in the other's place.
And if we are able to put ourselves in the other's place, we can advance much more.
This is the word that I carry in all the things that I do.
And not only in these basic professional competences, which, as I said, must be added to the different knowledges that each of us have , but I consider that in the professional field , apart from the fact that the knowledges that you have are valued ,
the attitudes that you have valued , but, above all, the attitude.
The attitude with which you deal with things.
Those people who, as I said, are going to face their first job, their first interview, well, those first jobs in which we start to send CVs, even if they tell us that we lack talent, the CVs are still working and we have to send them.
They are not going to look for you all day long and if they are going to look for you, we have to see what offers they offer you.
When the younger people, or any person, well, in this case, the young people who are going to face their first job, obviously, they all leave either a professional training or university, or whatever, and they leave with a CV similar to the rest of their peers.
That is, they have exactly the same knowledge because they have done the same degree, the same course, the same.
And when you have the same as the rest of your peers, how do you distinguish yourself from the rest of your peers?
It's that I know the same as him and I know the same as the other.
But how do you give a plus so that within your CV it stands out a little and you go a little further and you differentiate a little?
Well, you have to stand out by doing things.
It's the best you have to do nowadays.
And today there are many opportunities to take advantage of them to try to do things.
There is nothing better than putting in a CV those things that are done, that initiative capacity that I have to carry it.
And those things can go through something as basic as having a blog and developing the different things that you try, investigate, or attend an event and comment on the play and the papers that you found more interesting and create content.
And you publish that content .
And that blog is a reference for people that will see that apart from having studied the same as the other one, you do different things.
And who says to have a blog also says to share the different things he is developing no matter how small they are.
But the initiative if you go to Github or similar to share those things that you have been developing.
Because the recruiters will be able to go and see what things you are doing.
No matter how small they seem, you are already doing something that stands out from the others.
To participate in the programming hackathons.
You are showing concerns.
You are showing that you are really interested in all that kind of things.
Or to take advantage of the CTFs.
You are exposing yourself to challenges.
And that kind of things that if you put it in your work sheet or in your LinkedIn profile or in your CV, it stands out from the others.
It stands out from the others.
You have to try to stand out from the others doing things.
Not staying still.
I have said it in my personal field.
I have not stayed still.
I have started doing things.
And I did not know where I was going to go.
I still do not know where I am going to go.
Not much less.
I want to discover it on the way.
But I have started doing things.
And those things are the ones that distinguish a little not just because the chair of the assistant is very comfortable.
The chair of the assistant is also comfortable but it is necessary because you have to attend events or participate in the events.
I mean, there are great examples of different communities such as VTAP, for example, where they put a lot of talent of many young people and that talent of the young people gives them the opportunities like in many other conferences distributed all over Spain to go up and give the first talks or in the hack and bis that I mentioned before to give the first talks and break the ice to put into practice those communicative skills that you have to have to break the ice and do things and the networking to take advantage of these moments.
How many of you in addition to attending the workshops and the conferences are taking advantage of the networking moments not only to interrelate with the people that are highlighted up here but among you?
Alone?
Raise your hand.
Alone?
The rest of you are not taking advantage of the networking moments to get to know the professionals not from here but the ones sitting around you?
Do you know if the people sitting around you can give you things?
If they are here do they have a common interest with you?
To talk to them?
To take advantage of these moments?
You have to do it.
You have to take advantage of this to stand out from the rest.
Ok?
And I, to finish I always have a kind of recipe with the things that I consider important that should distinguish anyone.
It is a personal recipe with different characteristics because I consider that anyone should have these things.
The first one for me is professionalism.
Whatever you do you have to prove that you are a professional person that you take things seriously.
What do you do?
Well, in your profession in your area in whatever you take your things well.
As you have to do things feeling like a professional.
I don't have experience.
It doesn't matter.
Professionalism is not only associated with experience.
I can be a professional in what I do because I take things seriously.
I can be a professional doing class work and I show a capacity.
You have to be professional in this life.
Learning.
The learning capacity you never lose it.
You like learning whatever it is.
Having that capacity that hunger of learning of anything, areas that are very different.
I really have been involved in many talks in many events where people have been talking about things that for me I won't say science fiction.
Or yes, for me they were science fiction like Paco Martínez Soria as you have seen in the beginning.
I got involved in talks in the beginning when they started talking about reversing or a thousand stories I said what are they talking about?
And now I don't look like I'm lost but I keep being lost in many things but I don't lose that hunger of knowledge of learning from different areas.
And constancy.
Constancy is very important.
What you try after three days don't say I'm bored.
No.
Be constant.
And once you are during a constant period you will see if you really like it, it motivates you, it entertains you, it's your life or whatever.
Be constant in everything you do.
Attitude.
Attitude, as I said at the beginning, knowledge and attitudes are not just valued with P but attitude.
How do I face the things I do in the field both personal and professional.
I have to show attitude in front of things.
I'm here and forward.
You have to go with attitude for life.
Gratitude.
In this life we are nobody if we are not able to have in our mouth the word thanks almost for everything, not to say for everything.
I leave my mouth a thousand times constantly thanks, a thousand thanks because we have to go with humility.
We don't know everything and we learn so much from so many people that always in the moment, on the way you will find someone you have to thank.
Today you thank and the next day someone will be able to thank you because you have contributed something.
So in this life we have to go with gratitude and we have to say in the future what is hard for us to say the word thanks.
It is hard for us to say good morning and good afternoon when we enter a place but the word thanks, please.
It is not hard to say it because really everyone is helping us on the way and the next day it can be you who is thanked.
The ability to analyze.
The ability to analyze is not having an Excel or a graph to say I am here and I want to get there but to analyze the point of where I would like to get the personal or professional aspiration .
Analyze the point where you are and the point where you want to get.
But don't get lost in the void where you want to get but enjoy the way.
I am enjoying the way a lot.
Here I am enjoying a lot.
I am sharing these things with you to see if someone can motivate or contribute.
And responsibility.
Responsibility, as I said, has a lot to do with professionalism.
When you commit to do something in this life, you have to be responsible because it can go in a chain and harm other people if you decide to do something and then you leave people on the way.
You have to be responsible in this life.
And to this recipe I always contribute one more.
To this recipe I always contribute one more because it is something that accompanies me always.
And it is the passion.
It is the passion that I try to put to things.
If I am here today, on this stage, it is because someone that motivated me to launch the proposal to come here told me that word.
It is that when you do things, you do them with passion.
And he said the key word for me to say I am going to try.
I don't know what I have to contribute in an event like CyberCamp or how I have contributed in other events.
But he told me that word and I thought that just like many people as I said, he thanks me for the little things that I am doing both in public and in private.
I think that if I came here to show what I have done, my path and what you can do, if I had to leave a piece of that passion that I put in all the things that I do, for me, it is very important.
And that is why I discovered that in all the places where you fit is where you belong.
But once you have found your place, you always bring value.
If I think that at this point, because people have been telling me, I have brought a little value in the form of whatever, of anything, in this, and I have been able to help, what can't you do in the field of cybersecurity?
If I have been able, you too.
So, thank you very much and I hope you have learned something.
Thank you.