Let’s now turn our focus inward and consider the virtues we embody in our work. Reflect on the virtues discussed in this chapter, such as integrity, discretion, and technical proficiency. Which of these virtues do you already exhibit in your work? Which virtues do you need to cultivate further? Write down specific steps you could take to cultivate these virtues.
Here are some fictive examples to help guide your reflection:
1. Integrity in Cybersecurity Operations
Suppose you’re a security operations center analyst who always adheres strictly to your organization’s code of conduct. You’ve shown integrity by not taking shortcuts, even when under intense pressure during incident responses. However, you feel you could improve your discretion – sometimes, you might share more information about incidents than necessary with non-involved colleagues out of a desire to vent or discuss challenging situations. To cultivate more discretion, you could commit to discussing incidents only with those directly involved or with a designated mentor or supervisor.
2. Technical Proficiency in Ethical Hacking
Imagine you’re an ethical hacker who prides yourself on your technical proficiency. You spend time outside of work staying up-to-date with the latest exploits and defenses, and this knowledge directly contributes to your success in identifying vulnerabilities. However, you recognize a need to cultivate more courage. At times, you’ve found vulnerabilities you felt unsure about reporting due to fear of management backlash. To cultivate this virtue, you could commit to always reporting vulnerabilities you discover, regardless of potential short-term negative reactions.
3. Discretion in Information Security Management
As an information security manager, you’re trusted with a wide range of sensitive information. You exhibit discretion by ensuring this information is shared strictly on a need-to-know basis. However, you feel you could further develop your virtue of technical proficiency. While you understand security from a high-level, strategic perspective, you’re not always comfortable with the more technical details. To cultivate this virtue, you could take a course or certification to improve your technical knowledge in cybersecurity.
Activity Template for Teachers
As a teacher, guide your students in reflecting on their virtues using the following questions:
- Identifying Your Virtues: Which of the virtues discussed in this chapter do you already exhibit in your work? Can you provide examples of how you demonstrate these virtues?
- Recognizing Areas for Improvement: Which virtues do you feel you need to cultivate further? Why do you think these virtues are currently less prominent in your work?
- Creating a Virtue Development Plan: What specific steps could you take to cultivate these virtues? How could you track your progress over time?
- Review and Reflect: After implementing your plan for a set period, reflect on any changes. Have you noticed growth in the virtues you aimed to cultivate?
This activity aims to help students identify their strengths and areas for improvement, fostering a continual process of ethical self-improvement in their cybersecurity roles.