Kevin Henry: How to Make a Real Impact in Information Security

By Kevin Henry - Senior Instructor at Readynez

In the world of Information Security and Audit, it’s easy to feel stuck. Are you a genuine strategic asset to your organisation, or merely a name on a flowchart? The good news is, you hold the power to decide. You can make a profound impact every single day, but it requires a conscious decision to move beyond your current comfort zone.

The Professional Crossroads: Compliance Officer or Strategic Advisor?

Our careers present a fundamental choice. One path involves passively managing controls and maintaining the status quo. The other involves actively seeking to understand the core of the business—its goals, its pressures, and its constraints—to become a solutions-oriented leader.

Many organisations find themselves adrift, struggling to select and implement the right security measures to protect their most valuable assets. This confusion is often where your greatest opportunity lies.

Navigating Organisational Fog to Provide Clarity

Why do businesses struggle? Often, it’s due to conflicting external and internal pressures. Sales teams will advocate for the latest technology, promising a silver bullet, while management might chase the newest trend they read about. With finite budgets, it’s impossible to a-ption, you have a unique chance to cut through the noise.

By becoming a source of clarity and reason, you add immense value. This means moving beyond a purely technical role to become an expert who can assess threats, analyse vulnerabilities, and champion the adoption of genuine best practices that align with business objectives.

The Mindset Shift: From Gatekeeper to Enabler

There’s an old saying about not being able to teach new tricks unless you know more than the learner. To effectively guide your organisation, your knowledge must be current, expansive, and constantly evolving. Being lethargic or stagnant is not an option for those who wish to lead.

This is where your personal commitment comes in. You can choose to make small, incremental changes daily that bolster system reliability, secure critical data, and protect the interests of everyone your organisation serves, from customers and suppliers to your fellow colleagues.

The Engine of Impact: A Passion for Lifelong Learning

How do you fuel this journey? Stay inquisitive. Never stop learning. Persistently ask questions and thoughtfully consider how each small step moves your organisation closer to its security goals. Challenge the mindset of "that's how we've always done it."

True dedication knows no age. I was recently teaching a class that included several students over the age of sixty. They weren’t just going through the motions; they were investing their own money, driven by a passion for the field and a desire to contribute. They serve as a powerful reminder that our value is tied to our hunger for knowledge, not our job title.

These individuals inspire those around them because they actively seek to add value. By embracing this same passion for learning, we can all make a significant contribution to our organisations and to the wider welfare of society.