Security Careers: The Mic is Always On. Always.

Like politicians who've been embarrassed by public microphone mistakes, security professionals need to remember comments that are made in bad taste can put both a career, and an entire security program, in danger

By Michael Santarcangelo

June 17, 2010 — CSO —

"This is a big BLEEPING deal," remarked Vice President Joe Biden. Apparently he forgot the microphones were on and sensitive enough to capture his remark, intended to be private.

A few weeks later, former Prime Minister Gordon Brown remarked, "She's just a bigoted woman," after an uncomfortable encounter on the campaign trail. Like others, he forgot he had a live microphone on him.

While it makes for sensational television news and interesting blog fodder, this sort of happening is called a microphone gaffe. There is even an entire Wikipedia page dedicated to it http://en.wikipedia.org/wiki/Microphone_gaffe that provides some interesting links to awkward moments caught on tape.

In some cases, it's embarrassing. In others, it signals the end of a career.

Also see Santarcangelo's "Cultivating a healthy addiction for career success"

Without question, gaffes like this are bound to happen. Probably more so in an always-on, always connected, and always-someone-with-a-camera society.

Security professionals have covered this, too. Generally the approach is one of "look what else can go wrong" as users are both warned and admonished for their gaffes that could be construed as weakening security.

That misses a bigger point: what about security professionals? Specifically, what about how security professionals use the always-on equivalents of Twitter, Facebook, LinkedIn and others?

At the core of our profession is service to others. We serve the needs of the organization. This means we serve the needs of the users.

The moment we judge someone, we forfeit the opportunity to help them.

When I engage on Twitter, I'm a bit surprised to see user bashing going on. I've specifically omitted examples (it's too easy and not fair), but it generally involves someone in the security community lamenting a comment or action by a user they are supposed to be supporting. Labeled as stupid and mocked, it leads to a general chorus of "right on!" and "users are so stupid," and the like.

This is troubling. It tarnishes an already-challenged image of security and is dangerous for career success.

As politicians have learned, the microphone is always on.

Badmouthing a user - even by experience (without naming the user) - is likely to be uncovered. Just ask Ashley Johnson, a waitress in Charlotte, NC, who was fired over a comment made on her Facebook page. I've waited tables - and I can relate to her frustration, even though I don't agree with her actions. She crossed the line and ended up losing her job.

It's the same for security professionals.

• Print

• Show Time for Security
• 5 Steps to Communicate Security's Value to Non-security People
• Why do security professionals fail?
• Executive Coaching Speed-Date: One Day to a Better You