Episode 4
Breaking into Cybersecurity Leadership with Paul Ruppert
Breaking into Cybersecurity Leadership with Paul Ruppert
Paul Ruppert on LinkedIn https://www.linkedin.com/in/paulruppertintl/
Sponsored by CPF Coaching LLC - http://cpf-coaching.com
The Breaking into Cybersecurity: It’s a conversation about what they did before, why did they pivot into cyber, what the process was they went through Breaking Into Cybersecurity, how they keep up, and advice/tips/tricks along the way.
The Breaking into Cybersecurity Leadership Series is an additional series focused on cybersecurity leadership and hearing directly from different leaders in cybersecurity (high and low) on what it takes to be a successful leader. We focus on the skills and competencies associated with cybersecurity leadership and tips/tricks/advice from cybersecurity leaders.
This podcast runs on listener support and funding. Consider supporting this podcast:
https://breaking-into-cybersecurity.captivate.fm/support
Check out our books:
Develop Your Cybersecurity Career Path: How to Break into Cybersecurity at Any Level: https://amzn.to/3443AUI
Hack the Cybersecurity Interview: A complete interview preparation guide for jumpstarting your cybersecurity career https://www.amazon.com/dp/1801816638/
_________________________________________
About the hosts:
Christophe Foulon focuses on helping to secure people and processes with a solid understanding of the technology involved. He has over ten years of experience as an experienced Information Security Manager and Cybersecurity Strategist with a passion for customer service, process improvement, and information security. He has significant experience in optimizing the use of technology while balancing the implications to people, processes, and information security by using a consultative approach.
https://www.linkedin.com/in/christophefoulon/
Find out more about CPF-Coaching at https://www.cpf-coaching.com
- Website: https://www.cyberhubpodcast.com/breakingintocybersecurity
- Podcast: https://feeds.captivate.fm/breaking-into-cybersecurity/
- YouTube: https://www.youtube.com/c/BreakingIntoCybersecurity
- Linkedin: https://www.linkedin.com/company/breaking-into-cybersecurity/
- Twitter: https://twitter.com/BreakintoCyber
- Twitch: https://www.twitch.tv/breakingintocybersecurity
Mentioned in this episode:
Transcript
Outro Music
2
:Christophe Foulon: Welcome to another
episode of Breaking into Cybersecurity
3
:Leadership, where today we have
another leader from the telecoms area.
4
:Paul Rupert has an extensive experience
in various areas of telecom and
5
:helping organizations improve their
security posture as well as their
6
:ability to communicate using telecom.
7
:But he also has an extensive
leadership background, which
8
:we want to take advantage of
and harness his learning today.
9
:So Paul just give us a little bit of intro
about yourself and then we can jump into
10
:some of the leadership questions after
11
:Paul Ruppert: Well, great.
12
:First off, thanks very much for the
opportunity to have a discussion with
13
:you this morning and the opportunity to
share some experiences with your audience.
14
:As you mentioned, my name is Paul Rupert.
15
:I happen to be the president.
16
:Of a global consultancy called Global
Point View and I've been called an
17
:ambidextrous executive because I seem
to be able to manage two things at once
18
:in the context of, I've been a senior
level telecoms executive for a little
19
:over 25 years, but I've also been a
consultant back to the telecom space as
20
:well as to enterprises looking to leverage
telecommunications platforms so that
21
:In layman's terms means everything from
voice, data, as well as text messaging,
22
:which is where I got into this space.
23
:I've been in both global enterprises,
as I mentioned, like at and t, uh, and
24
:others, and I've also been involved
in two rank cockroach startups.
25
:One, which became a phenomenally
successful enterprise.
26
:We took it from literally to half
a billion dollar liquidity event
27
:in the course of five years.
28
:And I was responsible for billing
out the international piece of that.
29
:So therefore, again, I've got this
coin of domestic and international.
30
:As well.
31
:I've been involved in innovation
development as well as having
32
:to oversee the optimization
inside large organizations of
33
:different types of functionality.
34
:I happen to have two patents as a
co-author in messaging, interoperability,
35
:and last but not least, I've spent time
in both the private sector, which I just
36
:covered off as well as the public sector.
37
:I spent about 10 years in that space.
38
:Working for a US Senator as an
economic policy advisor to a
39
:cabinet secretary, running political
campaigns, kind of things you do
40
:when you are political hack.
41
:So that's kind of me in a nutshell.
42
:Christophe Foulon: So as you think
about your leadership experience,
43
:what were some of the things that you
wanted to do to move yourself from
44
:an individual contributor to become
that leader for an organization?
45
:Paul Ruppert: That starts off with, I
guess I got into the political world
46
:primarily because of a fascination
and interest in leadership overall
47
:and the various types of colors
and even cultures of leadership.
48
:Because I happened to be half French.
49
:So things like Napoleon Bonaparte
and Charles Dugal were sometimes
50
:elements of the conversation over
dinner when I was in high school.
51
:But as I started to get into the
private sector, especially in the
52
:context of mobile telecommunications,
I saw various types of opportunities,
53
:but I wasn't looking on just
one different functionality.
54
:I started off doing business
development in a mobile operator.
55
:Setting up kiosks, believe it or
not, retail kiosks before they were,
56
:the word was startup, or excuse me
standups as they are called now.
57
:And I recognized that because I
was in, even though it was a very
58
:large telco, and I mean that in
the context of we spent $3 billion
59
:for our licenses only in California
and Nevada, which was our operating
60
:footprint, but we were a startup.
61
:So there was always looking, there was
opportunities to be able to expand your
62
:reach, and that was how I manifested
what I thought was leadership in
63
:the context of, Hey, here's an idea.
64
:And that was part of the job anyways,
in the context of your developing new
65
:initiatives and business development.
66
:And then I moved into product development
after about six or seven months.
67
:So I was always raising the horizon
of what I was looking to be doing
68
:beyond just that particular role.
69
:And in addition to all that, I also
leveraged my My experience in the
70
:political world, which I really never
really thought of at the time, which
71
:was how effective are you in developing
relationships and networking across
72
:spaces that you're not familiar with?
73
:'cause I came into the business
not with a telecommunications
74
:or electrical engineering or
computer engineering background.
75
:I was starting from scratch, so I was
always on hunt for new information, new
76
:ideas, and candidly, part of my success in
my early stage of my career in that large
77
:organization as I was leveraging the fact
that I happened to be half French and I
78
:started looking at what was going on in
Europe in the same type of businesses.
79
:And so I took their playbook and brought
them back to California and said.
80
:We could be doing this, why aren't we?
81
:And in most cases that's a great idea.
82
:Okay, we go run with that.
83
:So raise your horizon, if you will,
and widen your aperture in terms
84
:of being able to develop your own
leadership skills and knowledge base.
85
:Christophe Foulon: And as you think
about that, like what are the solid
86
:skills needed for that leadership
experience within the organization?
87
:Paul Ruppert: Oftentimes the
hack need view of leadership is
88
:all about command and control.
89
:Order giving.
90
:And that's just not how people operate.
91
:And that's not how the world
operates, especially in the context
92
:of the cybersecurity aspects where
integrity and trust are paramount.
93
:As I looked at my own background
relative to your question, I'd say
94
:probably that delegation, collabora
collaboration and communication are
95
:the the three primary elements of
my own success, which are essentially
96
:critical in the field that we're in.
97
:In my view you the reality is that you
need to trust your team's capabilities.
98
:So delegate allows them to be specialized
in certain areas as well as expand their
99
:own capabilities especially in complex
fields like our, like cybersecurity
100
:or the telecommunication space.
101
:And collaboration brings.
102
:Different types of perspectives,
whether they're cultural,
103
:experiential, age, race, et cetera.
104
:To, the multifaceted security challenges
that you face in cybersecurity, as
105
:well as in the context of the jobs
that I held, which were globally based.
106
:So I had to be able to, as I used to say.
107
:Integrate the capabilities to elevate
the performance of the company and
108
:elevate the performance of the product.
109
:And I helped manage international
services at that time.
110
:So that was really key.
111
:And the other aspect in
terms of collaboration, I.
112
:Again, don't position myself as being
as a consultant, as a cybersecurity
113
:consultant because in reality I do
more business as a strategy consultant
114
:as well as a due diligence provider.
115
:In terms of mergers and acquisitions,
that's what I've been doing mostly in
116
:the last two years, and then recently
with the compliance issues, The
117
:collaboration aspect essentially drives
the ability to address multifaceted
118
:security challenges, which are
inherent in the cybersecurity world.
119
:And then the last piece, as I
mentioned, the communication piece.
120
:You know that it's essentially the
glue that holds everything together.
121
:So that everyone is on the same
page and can respond swiftly to
122
:the threats in the cyber aspect.
123
:Had my own little adage, which was,
uh, eyes on hands off, which is
124
:you entrust the people that are on
your team with them, quote, doing
125
:their job as Bill Belichick would
say of the New England Patriots.
126
:Christophe Foulon: As you think
about your skills and competencies,
127
:how would you rate yourself on them
on a scale of one to five, and how
128
:did that change over your career?
129
:I.
130
:Paul Ruppert: So the skills
and competencies, I could
131
:probably wax on forever.
132
:Even though I'm not an ego-driven
individual, we can all talk about
133
:ourselves, give me meaning delegation,
collaboration, communication skills,
134
:networking, things of that nature.
135
:I.
136
:Christophe Foulon: Yes.
137
:How did you improve them over your career
and your level of comfort with them?
138
:Paul Ruppert: As a kid, let's say
in high school, et cetera, and going
139
:into college, I started to find my
voice, I guess you could call it.
140
:I was never part of the, in-crowd,
no, no one ever thinks that they're in
141
:the, in-crowd, but I started in Because
of the experiences, the educational
142
:experiences and things that I pursued
especially as I started to recognize
143
:that I was not gonna get into medical
school because I had failed chemistry.
144
:But the political stuff was you
I took to water like a duck.
145
:And as a result of studying various
types of leaders, as I mentioned
146
:And I had some family experience
in the political realm as well.
147
:My father had run for Congress, et cetera,
but he lost I was able to see that, yeah,
148
:this is an avenue that I could pursue.
149
:And then luckily enough I took a shot
and ended up getting a job in the Senate.
150
:Now, the communications aspect was, I.
151
:You see that upfront, you're on
one side of the microphone carrying
152
:paper, but you, if you want,
you can learn a lot from that.
153
:And so I learned a lot from osmosis.
154
:So the communications piece critical.
155
:And then the nature of the work in that
first career was all about networking.
156
:Even the first day on my job, I worked
for a great man named John Danforth,
157
:who was a senator from Missouri.
158
:And the first day on the job, he
brought in the three I was what's
159
:called a legislative assistant, which
was really a low, the lowest level.
160
:Job that you could have inside the A
senator's office outside of doing key
161
:punch operating or something like that.
162
:And he pointed out all of you.
163
:And we were all like 24, 25, which is what
I was and again, there were three of us.
164
:I said, all of you are three calls away
from talking to a cabinet secretary.
165
:And that was kinda like, what
But the reality was that by
166
:leveraging his If you will.
167
:His posture and his power.
168
:'cause it was all derivative.
169
:It was a matter of here's how you can
solve the problems that you're gonna be
170
:dealing with, whether they be constituent
problems, not receiving a social
171
:security check or something along those
lines, or somebody inquiring about I.
172
:Particular economic policy,
et cetera, et cetera.
173
:After fashion, this was
six degrees of Kevin Bacon.
174
:This was three degrees of John Danforth
and how we operated how we did our jobs.
175
:So that was something that was quite
eye-opening as a young man, as a
176
:young executive, not an executive
per se, but as a young person.
177
:And then I leverage that
in the private sector.
178
:There's no question about it.
179
:Leveraging the negotiation skills that I
learned, horse trading on policy issues
180
:with other members, other staff, with
other members of Congress and senators,
181
:and being in the room at the same time
when, that was being ironed out or
182
:hammered out or argued out in some cases
at loud levels, but be able to take that
183
:and then apply it within a private sectors
context was, quite enriching for me.
184
:So the lesson there
185
:Christophe Foulon: sounds
186
:Paul Ruppert: out there,
get yourself in the arena.
187
:Don't worry about it.
188
:Yeah, you can say fake it till you
make it, unless you're trying to do,
189
:surgery, but you get the idea that this
is how you expand your capabilities
190
:and going back to lifelong learning.
191
:That's the other aspect of this.
192
:Being open to this and being
humble as well as my view.
193
:Christophe Foulon: It, it
seems like you really took
194
:advantage of the network effect.
195
:In this role, but also took took advantage
of the influence effect of the individual
196
:that you're working for, that you could
take advantage of their network and of
197
:the influence that you mentioned, that
you would get working for them to help
198
:achieve what you're looking to achieve.
199
:And this is a skill that you
almost have to use in your
200
:day-to-Day career as a leader.
201
:Paul Ruppert: Oh, absolutely.
202
:No question about it.
203
:Especially the network effect.
204
:I love the fact that you raised that.
205
:Now you've given me the opportunity
to talk about Metcalf's Law, maybe
206
:you're familiar with, maybe you're not.
207
:But Metcalf's Law is essentially and a, a.
208
:A critical element of the messaging
business because the messaging business
209
:is based on networks and network of
networks, and that's essentially you're
210
:riding on the telecommunications networks.
211
:So as I came into the the
telecommunications world, I learned about
212
:net cap's law, which is essentially you
have a geometric or an exponential with
213
:every node that you add to a network.
214
:And ironically, this guy
Metcalf started to design or.
215
:He proposed this notion during
the era of fax machines.
216
:It went from fax machines to the
internet to mobile telecommunications
217
:as well as into messaging.
218
:And I used to even sell a service,
when I was inside a vendor called
219
:Metcalf for exactly that reason.
220
:So yeah, all the nodes
within your network.
221
:It may sound trite and hackneyed, but
there is an impact as a result of that.
222
:And as I read a book, I don't know, maybe
25 years ago it was called business is a
223
:Contact Sport, which is essentially all
about how to go about building networks.
224
:And this is pre LinkedIn.
225
:Mind you, that's how old I am.
226
:Christophe Foulon: So taking that and
bringing it to . Now using technology
227
:like LinkedIn, what advice would you
give to future leaders as they build
228
:their networks, as they build their
influence to develop their career?
229
:Paul Ruppert: Find your voice and
don't be afraid to, Go out and take a
230
:stand on a proposal, an idea, whatever
it might be and then take your shot.
231
:There's I can't remember which Roman
Emperor said this, but fate, fortune
232
:favors the audacious or even more current,
the motto of the British SAS, the Special
233
:Air Service, which is who Daress wins.
234
:Those are two things that I've
kind followed on my own, and
235
:so you're not gonna do this
to be really brutally candid.
236
:You can go off and have a passion
for anonymity, and you may do
237
:some one thing really well.
238
:But then can you marshal support
from those who are different from
239
:you, who may think differently than
you, who may communicate differently
240
:than you, who may have completely
different backgrounds from you?
241
:Is essential.
242
:To leadership, the, again, leveraging
the political experience I have as
243
:I think back on it, just in this one
flash, the reality is that relationships
244
:scale, leadership, you can't run a
million, let's say you have a hundred
245
:thousand people if you want to.
246
:In the military where you have armies
that are a hundred thousand people,
247
:you can't run that on your own.
248
:There's a hierarchy that
exists within that context.
249
:The same thing exists inside
organizational behavior.
250
:Large organizations and even cockroach
startups where it may be just five
251
:guys, a dog and a computer in a garage.
252
:That same ability to,
interact and communicate
253
:perspective without dominating.
254
:That's one of the things I would
say probably has a problem in our
255
:political world at the moment.
256
:There's very little compromise between
the two, so you start to learn that.
257
:And then one last step in all
this is negotiation capabilities
258
:and understanding that.
259
:Christophe Foulon: I read a
book from an FBI . Agent talked
260
:I think it was never say no or
261
:Paul Ruppert: I'll take you
one step further, go ahead and
262
:I was about to say, if you
wanna look into the negotiation
263
:capabilities, I'll give you a book.
264
:So forgive me for
interrupting, but go ahead.
265
:Great minds think alike.
266
:Christophe Foulon: No, go ahead.
267
:It just made me realize that book
and I loved reading it because it
268
:takes you from No, the first no.
269
:Really means I, I wanna learn more.
270
:Versus it being a full stop.
271
:No.
272
:And when I sold telecommunications
back in my younger days it was
273
:three or four nos before we really
274
:Paul Ruppert: Yeah.
275
:I've again, I've run a large sales
organization and then somebody who might
276
:be at a lower level or a junior level.
277
:And I maybe have three levels
in my organization of 40
278
:people around the world.
279
:I remember, they said no to this.
280
:I'm like okay, you probably
were not qualifying properly.
281
:And secondarily, this is just a deferred.
282
:Yes.
283
:So just keep going.
284
:Go back to them, really go back to them.
285
:Yes.
286
:Go back to here's how, but the book
that I was about to suggest, at
287
:Harvard Business School there is a
class called Negotiations Analysis
288
:and has been there for about 35 years.
289
:And it's run by the same professor.
290
:Understand.
291
:I think it's still today.
292
:And I took that class I was a
Kennedy School student, meaning I
293
:was at the the Kennedy School of
Government, but half my coursework
294
:I took at Harvard Business School.
295
:And the professor's name's James Banus
and the book is Manager as a negotiator.
296
:And he talks about the
structure and process.
297
:So the FBI, I've read that book as well
some years ago when it first came out.
298
:The difference is one is very
approachable, one's very analytical, but
299
:that analytical applies to so many things.
300
:And the class was a great class because
every week he had us doing a negotiations.
301
:and it was negotiating with
other members of the class.
302
:And then, you would win a status by
having the best negotiating outcome.
303
:And the best negotiating outcome
was measured in the context of
304
:how to analyze negotiations.
305
:And we had all different types of,
and then in about five years ago,
306
:I picked up another book that he
wrote, which was three Dimensional.
307
:I think it's called three dimensional
Negotiations or three, 3D negotiations.
308
:What he's talking there is that
oftentimes in negotiations you have
309
:the two principles across the table,
but there's a whole constellation
310
:of under other interests that are
involved in these negotiations.
311
:They're just not at the table
that you might representing.
312
:And that was my takeaway.
313
:And again, it hooked me because.
314
:Again the elements that I've been involved
in terms of, selling and negotiating to
315
:mobile network operators or enterprises
vis-a-vis telecommunication services.
316
:It's not always the decision maker.
317
:There are influencers that are, may
not, may or may not be in the room.
318
:And, as I would always put it.
319
:For myself and then my teams, which
was what's the executive landscape for
320
:this challenge that we're looking at?
321
:Meaning, I wanna know who the
players are, where do they sit?
322
:Are they at the table?
323
:Are they out the door?
324
:Do we need to, and then oftentimes, the
commercials people like myself who are
325
:just focusing on the commercial expansion
and capabilities and then the pricing
326
:negotiations, et cetera, we had to be
able to have an understanding of what
327
:the technical side was considering.
328
:I.
329
:So then I started changing my
even approach to frontloading the
330
:technical elements of the discussion.
331
:So we were co-opting the technologists
on the other side who were
332
:saying no, that's not gonna work.
333
:We were going right to them at the
beginning and then moving to the
334
:commercial guys, it's a little bit of.
335
:Machiavelli in the context
of a, of negotiations.
336
:But that's, those are the kind of
things that I would also suggest
337
:pick up and read, including the
FBI agent's book as I recall.
338
:Or go to Harvard Business School
and take negotiations analysis
339
:Christophe Foulon: There.
340
:There you
341
:Paul Ruppert: one way or the other.
342
:Christophe Foulon: Any final advice
that you would give to future leaders?
343
:Paul Ruppert: The other element of this
is as I've looked back and I've had
344
:this question asked of me before the
pursuit of leadership is not linear.
345
:It may be a ladder, but it's not linear.
346
:It's not A to B2C to D you've gotta
widen your aperture and be very adaptable
347
:to opportunities as they come up.
348
:And then the other element is, you
don't always, even in the context,
349
:you know I was talking about earlier
bragging if you will, that I was in a
350
:startup where we went from scratch to
half a billion dollar liquidity event.
351
:There was a lot of days
that was just pure hell.
352
:And it wasn't what you
thought it would be.
353
:It's not a pristine, even though it's
portrayed in the context of the media,
354
:the collective business, media, et
cetera, the heroes of startups, et cetera.
355
:But the reality is most
days it's a knife fight.
356
:Then you start getting traction,
and then you've gotta stay humble
357
:in terms of what are we doing here
and looking for other opportunities.
358
:So it's constantly pivoting
and being adaptable to the
359
:conditions in front of you.
360
:Don't think that they're gonna be
that way, and to cap all that, it's
361
:like what Winston Churchill said, if
you're going through, hell keep going.
362
:Christophe Foulon: Wow.
363
:Perfect.
364
:Paul Ruppert: Oh, perfect.
365
:I don't about perfect,
but I appreciate that.
366
:I try to give good and
367
:get good conversation on these things.
368
:Christophe Foulon: I appreciate it and
I'm sure those that are listening will
369
:learn some lessons from your advice.
370
:The way I say it is that there's cheap.
371
:Lessons that you can learn from others.
372
:And there's expensive lessons
that you can learn from
373
:So hopefully they learn the cheap
lessons from you rather than
374
:expensive lessons for themselves.
375
:Paul Ruppert: To be honest.
376
:Christophe Foulon: and with that,
377
:Paul Ruppert: I'm always
378
:looking feedback as well in the context.
379
:There were a few times I'm thinking to
myself, no, you're going too long, Paul.
380
:You're gonna lose the audience
381
:I'll definitely ask them to give
feedback and share that with
382
:okay.
383
:Thank you.
384
:Christophe Foulon: Thank you very much.
385
:Everyone that's listening,
please share this with others.
386
:We need diverse perspective.
387
:We need diverse experience in order
to be successful in this field
388
:and individuals like Paul that
come from a different background.
389
:We need the skills and competencies
from those areas as well to be
390
:successful in cybersecurity.
391
:So it's a team sport.
392
:So invite others to the table.
393
:Thank you everyone for
joining and have a great day.