EPISODE 23: Let's Talk A.I. with THE CYBER GODMOTHER

Tanara, the "Cyber Godmother," shares comprehensive guidance on entering cybersecurity and AI fields, emphasizing that most people already possess transferable skills from their current roles (HR, project management, etc.) and need only learn the industry terminology. She highlighted the critical importance of mental health awareness in cybersecurity careers, noting that stress manifests as imposter syndrome and feeling "not enough," affecting professionals at all levels including CISOs

Career entry strategy: Focus on one specialization while gaining broad cybersecurity knowledge; transferable skills from current roles provide the foundation 26 Education path: Prioritize free resources (YouTube University, Google Cloud, Microsoft Learn, Professor Messer) over expensive certifications; coursework matters more than certification exams

Key Points About Cybersecurity Careers

Transferable Skills Recognition: HR professionals doing access provisioning are already performing Identity and Access Management (IAM), a core cybersecurity function 29 Project management skills exist in everyday activities like planning children's birthday parties—stakeholders, deliverables, and timelines are universal 1 Every role has cybersecurity elements; people just lack the vocabulary to recognize them

Mental Health and Stress Management: April is Stress Awareness Month; stress physically manifests and can be deadly in high-responsibility cybersecurity roles 10 Imposter syndrome affects everyone from entry-level to CISOs—feeling inadequate is common, especially for people of the global majority (Black, brown, women)

The Cyber Godmother's approach is nurturing rather than traditional mentoring, focusing on whole-person well-being beyond just "getting the bag" CISO Role and Responsibilities: Chief Information Security Officer is the ultimate accountability position—"the buck stops" with them, including potential legal consequences The Uber CISO served jail time for security failures, demonstrating personal liability 3 CISOs must balance trust in their teams with Zero Trust principles (verify then trust, not trust then verify)

AI Governance and Training Insights

AI Learning Methodology: Vibe coding allows building apps and websites without traditional coding knowledge—just describe what you want in natural language Use AI to teach AI: Tanara prompts multiple LLMs ("Claudine," "Barty G," "Chatty") to compare outputs and build master prompts Google Notebook LM reduces hallucinations by letting users choose specific sources for citations, then connects to Gemini's Guided Learning tool

AI Risks and Misconceptions:

AI hallucinations are common; one attorney cited non-existent court cases generated by AI, demonstrating the danger of not verifying outputs 1819 Master prompts must include specific roles, constraints, and "do nots" (e.g., "do not search Reddit, do not use opinion pieces") 1920 AI is fed narrow, biased data from limited lived experiences—"shit food" produces poor outputs 1821 AI Governance Specialization:

Tanara focuses on governance, risk, and compliance (GRC)—policies, standards, frameworks, and controls rather than technical hacking She holds ISO 27001 and ISO 42001 Lead Auditor certifications plus Cloud Security Alliance's TAZE (Trusted AI Safety Expert) AI governance involves risk assessments, analysis, and ensuring responsible AI deployment

Cybersecurity Color Wheel Explained Team Definitions: Blue Team: Defensive security (SOC analysts monitoring threats) 2225 Red Team: Offensive security (ethical hackers testing defenses) Purple Team: Integrates defensive tactics with offensive results White Team: Management, compliance, analyst, and logistics Orange Team: Facilitates interaction and education Yellow Team: Software coders and architects Green Team: Enhances security automation with code and design Hosted by Simplecast, an AdsWizz company. See https://pcm.adswizz.com for information about our collection and use o