Power Dynamics in Security Leadership: a legato leitmotif... (Sarai Rosenberg)
summary
Claims that authoritative directives always withdraw trust and that trust is faster to lose than to build; a four-step method to influence without authority—establish rapport, emphasize shared goals, provide risk context, describe mitigation options—and an implemented audit approach that uses the HTTP referrer to log who accessed customer data while preserving workflow (it calmed the support team and rolled out successfully). Examples include incident-response disruption by executive swoops and repeated-vulnerability patterns where directive force is tempting but damages long-term collaboration.
AI-written summary · about
chapters (11)
- 0:00Introduction and speaker background
- 1:05Why power dynamics matter
- 3:21Security leadership paradigms shift
- 9:30Evolution of management theories
- 12:49Forms of power in leadership
- 14:33Power as socially situated
- 15:59Influencing without authority
- 19:27Handling resistance and anger
- 22:42Violence and powerlessness
- 25:57Key takeaways and reflection
- 26:42Summary and closing
related talks
47mSecurity Leadership: Influence without Authority
30mThe Power of Persuasion: Better Security Through... Manipulation?
51mNot Go Quietly Adaptive Strategies and Unlikely Teammates
39mBeing Powerful While Powerless: Elevating Security By Leading Without Authority
31mDo You Even Tech Anymore: Management & Leadership in Security?
50mSecurity's Social Problem
19mLeader in the Land of Dilemmas
15mTelling Hard Truths to Impact Change in Cybersecurity