People new to information security often find themselves wondering how to make a name for themselves in the industry. Andrew Hay has lived most of his career on the D-list but has worked hard to increase his status in the hopes of someday landing that coveted A-list position. Through this talk we'll discuss how to expand your circle of influence, how to build your personal brand, and how to move up from the dreaded Infosec D-List. (might need to change this a bit but you get the general idea).

1. Monday, March 8, 2010
BSides San Franc#co
March 2, 2010

2. Who’s the Guy
in the Dress?
• Why that devastatingly
handsome man is Andrew Hay!
• Blogger
• www.andrewhay.ca
• Published author
• www.andrewhay.ca/books
• All around nice guy
Monday, March 8, 2010

3. What is the
D-List?
Few celebrities in the information
security industry
Many of us are relegated to obscurity
on day one of our security careers
Some are happy while others work to
claw their way out of obscurity
Monday, March 8, 2010
Well, the idea came up at a conference (I can’t recall which one) that there were very few
celebrities in the information security industry. As such, many of us are relegated to the D-
List on day one of our security careers.
Though some are happy to sleep in the “career basement”, others work to claw their way to
the top and out of obscurity. That, boys and girls, is the story of how the D-List came to be.

4. Who’s Who In the
Subjective Zoo?
• Very few people consider
themselves “A-List”
1% 5%
• Many people think they’re
10%
higher than “D-List”
• Some don’t even think
they’re worthy of “D-List”
84%
status
A-List
B-List Note - 47% of all statistics are made up at least 75.2% of the time.
C-List
D-List (a.k.a. Everyone Else)
Monday, March 8, 2010

5. Who’s A-List?
Monday, March 8, 2010
Everyone in this room should be able to name someone they consider an “A-List” information
security celebrity.

6. Who’s B- and C-List?
Monday, March 8, 2010
The “B-List” and “C-List” is sometimes even more subjective. Many people think that they’re
in this range. Sometimes it’s driven by ego, sometimes by accomplishments, but, in reality,
you’re at this level when your peers and “the industry” agree you are.

7. Who’s D-List?
Monday, March 8, 2010
What about the “D-List”? Who of you feel that you fall onto the “D-List”? Odds are, if you
think you are then you probably are. But is this really a bad thing?

8. D I
- L S T !
Strength in Numbers?
Monday, March 8, 2010

9. Knowing
where to
start is
hard...
Monday, March 8, 2010
Knowing where to start is hard, there is no question about it.

10. In the
Beginning...
Monday, March 8, 2010
In the beginning, if you are like me, you don’t really know how to get started in information
security.

11. Blogging &
Writing
Online Conferences,
Communities Gatherings &
Groups
Social
Networking
Monday, March 8, 2010
Starting a blog is an easy way to to get you and your message out there.
Writing articles, books, and papers are another way.

12. Proud D-Lister’s
Monday, March 8, 2010

13. Questions?
Andrew Hay
Email: andrewsmhay@gmail.com
Blog: www.andrewhay.ca
Phone: (403) 360-6367
Monday, March 8, 2010