The most trusted source for computer security training, certification and research.

Security Thought Leaders

<<Thought Leader Home

Introduction

Stephen Northcutt from the security laboratory conducts in depth interviews with the thought leaders in information security. For every novel security product, there is a thought leader, a man or woman of vision that sees the need and guides the creation of the security product. If there is someone missing whose voice you feel should be heard, drop me a note, stephen@sans.edu.

Table of Contents

What is a Security Thought Leader

August 26th, 2009
By Stephen Northcutt


The SANS.org Security Thought Leader project began with a simple Google query back in 2007. I had landed on a web page of Cisco's titled: Cisco Federal Security Thought Leadership.[1] I looked at the page and did a double take. It had topics, it had pictures, but it did not have people, well, John Stewart was at the very bottom. So, I started wondering, just how does one define "security thought leadership"? I went to Wikipedia and their opening statement is: "Thought leader is a buzzword or article of jargon used to describe a futurist or person who is recognized among their peers and mentors for innovative ideas and demonstrates the confidence to promote or share those ideas as actionable distilled insights (thinklets)."[2]

I do not totally agree with the definition, but since it is Wikipedia, it will evolve. But, key points of thought leadership clearly include:
  • Person - things cannot be leaders
  • Recognized by their peers; a person is not a thought leader simply because they call themselves that
  • Mentors, a thought leader passes their information on to help others
  • Temporally relevant; in these days of social media, timing is just as important as content, and news is being reported by the minute
  • Originality, retweeting is important, but it is not enough
  • Innovative ideas, the concept of intellectual leadership
  • Shares ideas as actionable distilled insights; I was never big on the whole thinklet craze, but actionable makes all the sense in the world to me
In our industry, information security, we tend to overuse the term thought leader. I did a Google search, April 23, 2009 for "security thought leader" and there were 1,400 results.[3] I am pleased to say that the top pages make more sense than they did just a year ago. Oddly, another thing ended up as page one, hit one from Google, a press release for "Oracle Recognizes Integrity as Oracle Applications Security Thought Leader". This is a bit scary, some company I have never heard of leads the entire planet as the number one, security thought leader. I have a lot of work left to go, but invite you to read the stories of Ivan Arce, Brian Chess, Anton Chuvakin, Marty Roesch, and many more.

The Security Thought Leader project is now in its third year. Over the years to come I hope to introduce you to some really great men and women. They will each meet the criteria we have defined ( with Wikipedia's help ) for thought leadership. And I could certainly use your help, what are the chances I know everyone that is a real thought leader for a field the size of information security, in a world as vast as ours? ZERO. So, if you know someone special that has made a major contribution to the field, please see our Security Thought Leader Interview framework, we'd love to learn more about them. Questions? My email is stephen@sans.edu.

1. http://www.cisco.com/web/strategy/government/usfed_security_leadership.html
2. http://en.wikipedia.org/wiki/Thought_leader
3. http://www.google.com/search?q=%22security+thought+leader%22&sourceid=navclient-ff&ie=UTF-8&rlz=1B3GGGL_enUS260US261
<<Thought Leader Home

SEC507 Skyscraper

Contact us: (301) 654-SANS(7267)
Monday - Friday 9am-8pm EST/EDT