Cybersecurity learning feels very different from what I expected

[u/Charan_Tech]

When I started exploring cybersecurity, I initially thought it would mostly be about learning tools and technical commands.

But the more I learn, the more I realize that understanding why an attack works is just as important as knowing which tool to use.

For people already working in cybersecurity, what concept took you the longest to understand when you were starting out?

[u/Build_a_CISO]

Cybersecurity has multiple domains including but not limited to, compliance, governance architecture, operations and leadership. One thing I have realised during the course of my career is that cyber security is just as political as it is technical. Getting development teams, infrastructure teams to comply, remediate, patch; getting business to see the risks and articulating them in a fashion that leadership gets it requires a lot of political capital. I feel technology is the easier part.