“That's what it looks like: I mean, what you're doing is insane. Normal productivity is this level and you've gone like crazy with AI.”

Go where your curiosity takes you. And the question is: how do I become curious? Well, you’ve got to expose yourself to a lot of things and you have to have something that you want to do in the world, right? And once you have those things and you start exposing yourself, ideas pop up.

You have curiosities, you start chasing them. And then pretty soon you're hacking because hacking is like answering questions.

And it's the same with AI. The most important thing is not that you have that tooling. The most important thing is that you know what you want to do.

Cybersecurity Governance, Risk Management, and Compliance (GRC) is a field that, despite its critical importance in the digital age, often flies under the radar. At its core, GRC is about establishing and maintaining a framework to ensure that an organization's information technology systems are secure, compliant with regulations, and operating within acceptable risk levels. This might sound like a niche concern, but in an era where data breaches can cost companies millions and severely damage their reputation, the role of GRC is anything but peripheral. It's the unsung hero of the tech world, ensuring that businesses can operate smoothly and securely. What makes GRC truly awesome is its ability to blend technical acumen with strategic oversight, making it a unique bridge between the IT department and the boardroom.

For individuals from diverse backgrounds such as accounting, breaking into cybersecurity GRC might seem daunting at first glance. However, the skills and perspectives they bring can be incredibly valuable. Accountants, for example, are already well-versed in compliance and risk management in financial terms, which is a solid foundation to build upon. To transition into cybersecurity GRC, they should start by familiarizing themselves with the basics of information security principles and technology. Online courses and certifications such as Certified Information Systems Auditor (CISA) or Certified in Risk and Information Systems Control (CRISC) can be excellent starting points. Networking with professionals in the field through industry events or online platforms can also provide invaluable insights and opportunities.

Moreover, leveraging their background in accounting, individuals can highlight their understanding of regulatory compliance, risk assessment, and internal controls when applying for roles in cybersecurity GRC. These are areas where their expertise can shine and make a significant impact. It's also beneficial to develop a mindset that is curious about technology and its implications for security and compliance. Cybersecurity GRC is a dynamic field that requires continuous learning and adaptation. By embracing this challenge and leveraging their unique skills, individuals from accounting or similar backgrounds can not only break into cybersecurity GRC but also thrive and drive innovation within it.

In conclusion, cybersecurity GRC is an awesome and underrated field that plays a crucial role in safeguarding our digital world. For those looking to break into this field from diverse backgrounds such as accounting, the journey involves building upon existing skills, embracing continuous learning, and connecting with the cybersecurity community. With the right approach, they can make a seamless transition and contribute significantly to the evolving landscape of cybersecurity governance, risk management, and compliance.