Hacking Hearts and Minds

The talk argues that social skills and communication are abilities people can practice and improve over time, not traits reserved for a lucky few. The speaker, a security leader who moved from developer to CISO, describes how becoming a parent prompted him to rethink his career, and how a book on influence without authority pushed him to focus on persuading people he did not manage.

He then covers the experience that shaped his approach. Giving talks helped him structure ideas and practice public speaking, and mentors taught him how to pitch to executives in the short time they allow. Reviewing many team security self-assessments taught him to read rooms, adapt to different audiences and handle first impressions. He also explains how a gap between self-perception and how colleagues see you can weaken your credibility, using his own reputation as a joker as an example, and suggests building enough trust to ask for honest feedback.

The later sections turn to practical techniques. Storytelling can make security numbers and incidents compelling, and explanations should be adapted for executives versus developers. He describes lobbying by meeting each decision-maker one-on-one before a key meeting, seizing openings after incidents to win budget, and using body language and mirroring to build rapport. The takeaway is to treat communication as a deliberate skill and to use influence to get security prioritized.