Disney’s First CISO Shares Her Wisdom with Women In IT Security

I was surprised and delighted when Keynote Speaker & CEO of T.E.N., Marci McCarthy invited Anne Kuhns, the first Chief Information Security Officer (CISO) for the Walt Disney Company, to take to the speaker’s podium at last week’s First Annual Women in Security ISSA event in Tampa. 

“Anne has been one of the greatest examples of leadership and vision that the industry has ever known, but because I could not do her story justice – she is here to tell you herself.”

– Marci McCarthy, CEO & President of T.E.N.

Anne took to the stage and graciously shared her story (and photos…see my favorite one above and see the rest in Marci’s Presentation) of joining The Walt Disney Company in 1978 as a programmer and working her way up through the technology organization to eventually becoming the first Chief Information Security Officer for the most magical place on earth.

“My Dad first got me interested in computers when he was the assistant business manager at the University of Florida data center. I thought that it was very interesting and a nice alternative to the stereotypical jobs available for girls at the time,” Says Anne.

 

Her first real job was computer programming for the Department of Cardiology at Shands Teaching Hospital at the University of Florida (UF). While there, she got her Masters in Computer Science.

After graduating from UF (Go Gators!), Anne set out on her journey to the top of her profession by first getting exposure to all areas in the IT organization. This exposure and education allowed her to understand the different roles and responsibilities necessary to make IT work.

 “Everything I did early in my career was to increase exposure to all aspects of the IT organization that I could to get perspective and gain empathy. When you can feel their pain, you earn loyalty, respect and the trust of your team.”

– Anne Kuhns, First CISO for Disney

Anne’s passion  for her career and for making an impact came through as she shared the three questions she asked herself every day while building and leading the information security organization:

 Anne also imparted her top 5 lessons learned from a career a successful career in IT and Information Security:

1. Always Under Commit and Over Deliver. Your credibility is at stake with every promise you make. Don’t let ego get in the way of good sense and focus on the needs of the business.
2. Read Everything You Can Get Your Hands On. Use free resources from respected membership organizations like ISC2, ISSA, ISACA, (and Wisegateit.com**)
3. Technical Skills Are The Price to Play the Game. Game changers are communication skills, writing skills (write a project proposal), analytical and critical thinking skills, problem solving skills, project management skills and leadership skills.
4. Get as Much Experience in Different Areas As You Can. Get a feel for the areas you are passionate about so you can think holistically and earn the respect of your team.
5. Change is the New Norm. Adapt or Get Out of the Way! Typically, about a third of technical staff don’t make the leap when major shifts in technology occur.

Finally, she shared some key wisdom for those aspiring women looking to fill her shoes or follow in her footsteps:

 “There is so much opportunity to advance to a highly visible position. On the other hand, if they don’t know what you do, it’s difficult to know whether you are doing a good job or not. Just doing a good job isn’t enough. You have to market yourself and your successes.”

 ** I added Wisegateit.com as a shameless plug for the incredible resources our members (leading practitioners in IT & Information Security – no vendors) share in the library from the “Voice of the Practitioner”.

This article is part of a 3 part series on Women in Security.  Read my first post Women Insecurity and Stay tuned for my final installment with the 3 key themes from the event and specific advice from some truly inspiring women in security today.