Interview with an Expert - Michael Babischkin: CyberSecurity

Summary

In this insightful interview, Michael Babishkis, Vice President and Duty Director of Information Security at the Federal Home Loan Bank of Chicago, shares his extensive experience in cybersecurity, incident response, and vulnerability management. Michael recounts his journey from the U.S. Coast Guard to leading cybersecurity initiatives at Sherwin-Williams and Granger. He emphasizes the importance of proactive security measures, cryptography, and the need for security professionals to balance business operations with robust security practices. Michael also offers valuable advice for aspiring cybersecurity professionals, highlighting the significance of internships, continuous learning, and diverse skill sets.

Takeaways

• 😀 Michael Babishkis is an expert in cybersecurity with experience in incident response and vulnerability management.
• 🔐 He began his career in the Coast Guard, where he was exposed to secure environments and data communications, which laid the foundation for his expertise in security.
• 🛠️ Michael's roles in the Coast Guard included managing cryptographic materials and coordinating data communications, which are crucial for maintaining security.
• 💻 After retiring from the military, he established a Global Incident Response Program at Sherwin-Williams, highlighting the growing importance of security in organizations.
• 🏦 At the Federal Home Loan Bank of Chicago, he leads a security program that operates as if the organization were much larger, emphasizing the significance of security in banking.
• 🔑 The importance of cryptography extends beyond confidentiality to ensuring data integrity and non-repudiation, which are vital for secure data transmission.
• 📚 For those interested in cybersecurity, Michael advises participating in degree programs and internships to gain practical experience and show a genuine interest in the field.
• 🚀 He emphasizes the importance of continuous learning and development, as well as the ability to communicate effectively, especially for roles involving vulnerability management and incident response.
• 🧐 Michael stresses the need for security professionals to balance security measures with the operational needs of the business, avoiding creating unnecessary hurdles.
• 🛡️ Security is not about achieving perfect security but about tailoring programs to support business goals while maintaining secure operations.
• 🌐 The rise of AI technologies presents new challenges for security professionals, who must adapt to understand and manage the risks associated with these tools.

Q & A

What is Michael Babishkis' current position and what organization does he work for?

Michael Babishkis is the Vice President and Duty Director of Information Security at the Federal Home Loan Bank of Chicago.

What areas of expertise does Michael Babishkis have in the field of cybersecurity?

Michael Babishkis' areas of expertise include cybersecurity, incident response, and vulnerability management.

How did Michael Babishkis' career in cybersecurity begin?

Michael Babishkis' career in cybersecurity began when he served as an active-duty Coast Guard for 22 years, starting as a Radioman and moving through various roles involving data communications and security.

What was Michael Babishkis' role in the Coast Guard related to cybersecurity?

In the Coast Guard, Michael Babishkis served as the Assistant Information Security Officer for the Great Lakes, assisting the Coast Guard Cyber Command with security investigations, managing user access, and conducting security awareness training.

How did Michael transition from the military to the private sector in terms of cybersecurity roles?

After retiring from the Coast Guard, Michael took a role with Sherwin-Williams, where he established their Global Incident Response Program, and later worked with Granger to mature their Global Incident Response Program.

What is the Federal Home Loan Bank and what makes it unique?

The Federal Home Loan Bank is a unique organization with 11 branches within the United States that serve as banks for other banks, providing funding so that they can underwrite loans and mortgages.

What is the significance of the CIA triangle in the context of cybersecurity?

The CIA triangle in cybersecurity represents the three core components of security: Confidentiality, Integrity, and Availability. It illustrates that a secure system requires all three elements.

How has the use of cryptography evolved in cybersecurity according to Michael Babishkis?

The use of cryptography has evolved from primarily focusing on confidentiality to also ensuring the integrity of data through techniques like digital certificates, SSL, and hashing.

What advice does Michael Babishkis have for students interested in pursuing a career in cybersecurity?

Michael advises students to participate in degree programs, seek internships, and engage in projects that demonstrate an interest in cybersecurity to gain entry-level experience.

What does Michael Babishkis look for in an entry-level cybersecurity candidate?

Michael looks for candidates with a basic understanding of the field, indications of interest in security, and a desire to grow and develop within the organization.

What is the approach Michael Babishkis takes when hiring for cybersecurity positions?

Michael aims to hire individuals for long-term growth, looking for a basic understanding of IT and security, and a continued interest in the field, rather than just experience.