September 3, 2010

What BSides Austin taught me about speaking (and the future of our industry)

By Joseph Sokoly

Note from Michael: I am excited to share this guest article from Joseph about his experiences speaking at BSides. I’m encouraging him to share more ideas in the future – and we might just get him as a contributor!

Last month, I attended my first security conference ever. It was also the first time that I spoke at a security conference. As a relative newcomer to the industry, I stepped out on a limb to give that talk, and it has rewarded me in spades. More, preparing for that talk taught me a few things that I’d like to share.

We aren’t preparing our up and coming speakers how to properly speak

While BSidesAustin was my first time to speak at a security conference, (which brought its own new set of nerves I had never experienced before) I am one of those people born with a predisposition to public speaking.

In order to earn the rank of Eagle Scout, I was required to earn a “Communications Merit Badge” culminating in a public speech of at least 10 minutes.  I completed that requirement by opening a fund raising luncheon with an audience that included mayors, State Representatives, and of Scout and political leaders.

As a computer science major at the University of North Texas, I took a required course called Professional Presentations, which taught – or claimed to teach – how to give professional presentations in the workplace. When I began preparing for BSidesAustin, I called on the experience that I had from my Eagle Scout experience and blended it with the lessons learned from this class, and my outline looked something like this:

  • Introduction
  • Agenda
  • Point One
  • Point Two
  • Point Three
  • Conclusion
  • Questions and Answers

It’s a tried and true method of delivering a talk, right?

It’s what was ingrained in us as we learned that semester. What I realize now is that this method should be considered “tired and broken.”

The problem with this method is that it doesn’t engage an audience. Audiences have become conditioned to expect this method of delivery, and when they see a speaker beginning their talk in that style, the audience begins to tune out the speaker. So by your second slide, you’re already fighting an uphill battle for your audience’s attention. This is the last place you want to be as a new speaker.

When I began my preparations for BSidesAustin, I began to prepare my talk in the way I had been taught. It wasn’t until I sat down with my mentor and he explained the importance of properly engaging my audience that I threw out my slides and rebuilt my talk from the ground up. It felt like a leap of faith.

The reaction from my engaging talk was stunning, convincing me that we need to shift our thinking and change our behaviors if we are going to grow as a profession and make a difference.

Based on that experience and the way my eyes were opened (by my mentor and others), here are some considerations for the future:

We need to continue providing venues for new speakers to break the ice

BSidesAustin was an incredible experience, not just because of the community that was there, but also because of the fact that it gave me a place to try my hand at speaking about security.

It was a welcoming community that gave me the feedback I needed to grow in my speaking abilities. And yet, I still know that I couldn’t give either my BSidesAustin or BSidesBoston talks at my local ISSA chapter, NAISG group, or DC meetup. We have established speaking styles that we expect, and this keeps new speakers out of the places that, especially in the Dallas area, could desperately use them.

We need to personally be encouraging and mentoring new speakers to speak

I’ve said it in each of my talks, but I’ll say it over and over again, I would never have been able to execute my talk in Austin with any real measure of success without the help of my mentor.


Once I gave my first talk, the second one was much easier to give. But the most interesting thing that came out of my mentorship, was that I could immediately turn around and start taking the same advice I was given and give it to others who were preparing for their first talk. I used it in my Boston talk, and I’ll say it again, what you do now makes a lasting impact.

We need to offer additional opportunities to connect, engage and learn

Tools like the security catalyst community, career compass and the forth-coming guild with mentoring are great; we need more!

Stacy Thayer just had a great mentorship panel at SOURCEBoston, and when I asked her what motivated her to create the mentorship panel, she said it was a result of the mentorship she had when she was getting her start. It just keeps paying off.

Hopefully this gets you thinking about how you can get involved, and perhaps reconsider how you give your own talks.

Michael again: want to get involved? We’re relaunching the Security Catalyst Community this summer. We are expanding beyond forums and incorporating the Career Compass and mentoring (complete with training and guidance). Get constructive, get engaged and join us.

Related posts:

  1. Giving back: The Catalyst Career Compass Program

About Joseph Sokoly
Joseph Sokoly has been an InfoSec professional since 2007. He works at NetBoundary and is currently pursuing his degree in History from the University of North Texas. He has spoken at BSidesAustin and BSidesBoston, and is currently living the in the Dallas area. He's always available at twitter.com/jsokoly

Comments