How To Build An InfoSec Program From Scratch
Source: YouTube · Prabh Nair · published Dec 1, 2025 · 30:29
This video features a discussion about the onboarding process for new employees, emphasizing that strategy should not be the immediate focus when starting a new role 0:11.
Key Takeaways:
• When joining as a new employee, strategy building should be considered a "phase two activity" rather than an immediate priority 0:20
• There is skepticism around the common advice to "go and build a strategy" right away, suggesting this approach may be gimmicky 0:11
• The initial focus should be on understanding requirements and case studies, including how applications are released 0:26
• Not everyone will follow the same path when starting a new role, and first interactions vary by individual 0:00
The conversation highlights a practical approach to onboarding that prioritizes learning and understanding over premature strategic planning.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
So I want to understand from your perspective in in a ground in you when you went on the first day and after that who was the first person to whom you interacted it is not always that everybody will get the chance to follow the same path >> there's a lot of gimmick around go and build a strategy go and build a program what is your opinion you know when you were in as an employee and all that so how you see this as a process >> strategy will come I will say this is a phase two activity when you're joining as a new indirect >> so once we understand this requirement and the the the way you talk about the case study you know they're releasing the applications and all that then what is the next step after that >> next step is uh like once you understand the the organization and the people in th…