Category: Learning

Cybersecurity Simplified: Best Practices to Reduce Risk

September 20, 2023 / / 0 Comments

After delivering the keynote at AgWest Farm Credit’s “2023 Forest Products Summit” in Portland, I parked myself in a seat on the side to listen and take notes during presentations on geopolitics, macroeconomics, and cybersecurity. This final talk, by Rachel Wilson, current Head of Cybersecurity for Morgan Stanley Wealth Management and formerly an executive at the National Security Agency (NSA), changed the way I think about everything electronic with my team at Forisk and at home with my family.[1]

What is Cybersecurity?

Cybersecurity refers to protecting computers, data, and networks from digital attacks that destroy intellectual property or hijack systems via ransomware. Cyber criminals use simple, easily deployed tools to acquire access and personal information. Therefore, cybersecurity starts with educating ourselves on ways to minimize the risk and implications of attacks.

The basic “tools of the trade” for bad online actors include phishing and social engineering. With phishing, fraudsters send phony but reputable seeming emails or text messages to get you to reveal personal identifiable info. Hackers throw hooks in the water and hope you bite by clicking a link or attachment that downloads malware and disables your computer or network. 

Social engineering involves techniques to manipulate you to “bite the hook”, such as creating a false sense of urgency, appealing to your good will, or leveraging your personal network. For example, hackers sometimes check social media, pluck names of friends from your network, open an email account in that person’s name, and send you a phishing email from that account. (If unsure about an email, call your friend to confirm they sent it.)

Best Practices at Work (and Home) to Reduce Risk

To protect both your personal information and your firm, consider the following:

  • Keep all operating systems patched, updated, and current. This includes your phone, laptops, iPads, and anything connected to the web. Rachel Wilson emphasized that this is by far the most important and effective thing you can do.” 
  • Back-up everything with a “1-2-3 Strategy”. This means three back-ups in two locations with one disconnected from the internet (such as a regularly updated external hard drive). 
  • Practice uploading and restoring from a backup. Train to fight. If we don’t know how to restore a backup when needed, we’re not ready.
  • Use strong passwords (and a password manager). Use long, complex passwords with capital and lower-case letters, numbers, and symbols. Then use a secure password manager to organize and store them. Do not keep a “Note” on your phone or computer or desk labeled “Passwords” or a simple document on your computer that lists all your passwords.
  • Use secure wireless connections. Any public Wi-Fi connection, like drinking water downstream, is free but risky.
  • Enable two-factor authentication. This also significantly increases the security on your accounts. Two-factor authentication typically requires “(1) something you know and (2) something you have.” For example, logging in requires a password (something you know), followed by you receiving a confirming text message on your phone (something you have).   
  • Check your security settings on social media. Facebook and others often change security settings, and you may not be aware of how they’ve changed. A big risk to personal information is that you have little control over what your friends share, so if you don’t want your stuff going all over the place, prevent sharing via your personal security settings.
  • At home, consider having a single, standalone device for high impact activities and business. Typically, that would be a desktop or laptop computer, and the entire family would understand that “on this machine: no social media, shopping, gaming; only banking, investing, and business.”

Interestingly, your most secure device is apparently your mobile phone, so keep that in mind if banking by phone versus computer. That said, avoid letting people know when you’re not home by posting pictures from your phone while you’re on vacation. Share those exotic pictures after you return home.

[1] This post summarizes advice from Wilson’s presentation and from materials and videos provided by AgWest (https://agwestfc.com/education-and-resources/fraud-and-security).

Shooting Diameters with Danny Hamsley

October 10, 2022 /

When I missed the mark in my role as a log buyer and harvest manager in northeast Georgia in the 1990s, Danny Hamsley had a way of setting me straight. It would start with a phone call. 

“Brooks, I’m riding with you in the woods tomorrow.” 

Early the next morning, I would pick Danny up in the parking lot of a restaurant, or wherever he parked his red Jeep Cherokee, for a day of visiting logging jobs, wood suppliers, and customers at mills. When riding down county roads, Danny could look out the window and identify any tree, calling out its Latin and common names in quick succession. Then he’d test me. To that point, I had not taken a formal dendrology class or spent hours studying tree species. My knowledge was limited. Sure, I could name a magnolia or Japanese maple, but hornbeam? Could I pick a scarlet oak from a Shumard? No, I could not.  

At some point, standing near a logging job or reviewing a thinning operation, Danny would directly and succinctly reinforce expectations and help me better understand what really mattered in my work on behalf of the company. For example, in my first year, I was slow to finish paperwork and contracts. This delayed payments to our wood suppliers. While we received regular paychecks, my suppliers depended on this paperwork to get the monies owed them.

In this instance, Danny told me about a call with a supplier. “Look, this guy likes you well enough, but he doesn’t like you enough to not get paid.” Message delivered and understood. He emphasized the business implications to our operations, to my supplier, and to me. To this day at Forisk, I try to pay our vendors and contractors quickly. I want them to view us as reliable, responsive, and appreciative of the value and services they provide to us.

When walking the woods, Danny and I had little competitions like throwing rocks at trees to test our arms, or “shooting DBHs”, a game foresters play to see who could better estimate the diameter at breast height (DBH), to the tenth of an inch, of trees. From 20 feet away, we’d say, “That one is 10.2” or “that’s 9.6 inches.”  Then we’d tape it to see who was right and the loser bought lunch.

Danny’s knowledge ran deep. One time, I travelled with him to Bruce, Mississippi to visit a sawmill that had installed the latest “curve saw” technology, which could cut straight boards out of banana shaped logs. After the tour, we ate lunch with one of the machine operators, who had spent his career in the mill. He asked Danny, “how do trees grow? Why are they crooked?” Danny pulled out a napkin and diagramed the twisting nature of tree growth and how it reaches for the sun and leans away from shade to maximize available resources. The tree corkscrews itself up and away from any hinderance and goes to the light.

Fifteen minutes later, Danny got up to get more sweet tea, and the guy said, “well, that was more than I wanted to know!” and we laughed. Danny, who passed away unexpectedly three weeks ago[1], was a scholar of many things, and his tendency to offer exhaustive explanations to basic forestry questions earned him the nickname “Mr. Big Words” on The Forestry Forum, where he served as a moderator since retiring from a thirty-year career in the forest industry.

Danny and I often discussed the challenge of being human and raising children, long before I ever married or had children of my own.[2] Danny called this the “curse of the big brain.” Kids don’t fall out of the womb ready to program iPhone apps. Human development from babe to self-sufficiency includes a long apprenticeship supervised by parents, and along the way we communicate and reinforce dozens of expectations. Our job includes loosening the reigns as they grow and mature and, ultimately, letting go.

When you do something long enough, like shooting diameters or working with teams or reading widely, you develop a sense for what matters and what does not. William Danny Hamsley, a man who thought deeply about how we live on this planet, taught me many things about forestry and people, and I will miss him.

[1] His obituary is available here: https://www.watsonhunt.com/obituaries/William-Hamsley/#!/Obituary

[2] The relationship Danny and I built extended to his oldest daughter, Amanda, who became my business partner a decade ago.

Information Overload: Brains and Homo Sapiens

August 21, 2022 /

We share the brain of our ancestors. The humans of one hundred thousand years ago, as they started migrating from Africa, toted between their ears brains similar to the ones we carry today.[1] The average homo sapiens on the street, with a comparable mental engine to our own, was simply at a different phase in the collective understanding of how things worked. They cut with sharpened stones while we etch with lasers. They hunted and gathered while we order online. They walked while we drive.

Today, we have a different challenge. Rather than make our way with roughhewn tools and limited knowledge, we flounder under an avalanche of information when making decisions. The sources of the information, from social media to corporate advertisers to political campaigns to entertainers, are incented to produce a flood of content, and they do so with a jovial disregard for the implications on our mental or community health. It’s a numbers game that requires capturing and retaining monetizable volumes of eyeballs and attention.

In 1971, Nobel Prize winning economist Herbert Simon wrote, “What information consumes is rather obvious. It consumes the attention of its recipients. Hence a wealth of information creates a poverty of attention.” 

“What information consumes is rather obvious. It consumes the attention of its recipients. Hence a wealth of information creates a poverty of attention.”

Herbert Simon

The implication from Simon’s observation is that the pain of dealing with this information overload falls on us. And we are not well-prepared for the task. We share the scarcity mentality of our ancestors, who scavenged for food and knowledge, while we live lives of relative and absolute abundance. We hoard and consume and struggle to manage inboxes. We stuff offsite storage facilities with so many “precious” belongings that they could furnish a small planet.  We are simply not that good at sifting, sorting, and deleting.

Anything we can do teach our children and ourselves how to filter and capture useful information, to appreciate the fertile nature of how lessons in one area may enhance our ability to understand things in another, the more we advance positive self-care, confidence, and our collective ability to learn. In this way, we prepare our minds for navigating and battling the overwhelming noise of a chaotic world.

In future posts, I will focus on the personal “growth rings” of learning, thinking, and communicating.

[1] S. Neubauer, J.-J. Hublin, P. Gunz, The evolution of modern human brain shape. Science Advances. 4, eaao5961 (2018). Available at: https://www.science.org/doi/10.1126/sciadv.aao5961

How to Deliver an Educational and Insightful Talk

July 27, 2022 /

The question “how do I teach this to them” has puzzled presenters, professors, and parents since the Greco-Roman god Apollo taught Chiron, his foster son and polymathic centaur, how to throw a curveball.

In this post, I share an approach for outlining and preparing the delivery of educational presentations.

##

My general preparation for an educational or invited talk at a conference, in a classroom, or for a client event includes five steps.

First, confirm the theme and audience.

When invited to give a talk, ask about (1) the objectives of the event (and my host) and (2) the background of the primary audience. Talking to 5th graders about trees differs from presenting on the forest industry to a Rotary Club. 

At times, the specific theme is less important than the role you serve for the audience and your host. If you are the after-lunch speaker, focus on a (relevant) subject you truly care about and know deeply, one that allows you to bring extra energy to the room. This may or may not match exactly what you were asked to speak about, but in my experience, a really good, engaging talk that captures the attention and interest of the audience is a success, regardless the advertised theme. 

Then, select your insights. 

If your theme is bears, which two or three things about bears do you plan to focus on and communicate? What bears eat? How bears walk? Who’s smarter than the average bear, Smokey Bear or Yogi Bear? Your choices comprise the “modules” or parts of your talk, and they are selected with the objectives of the event and the primary audience in mind.  These are your key messages, the main points you want to share.

Third, choose your examples.

Relevant examples, evidence, and data that you know well will help the audience absorb and appreciate your ideas. Select examples – stories, maps, figures, graphs, movie clips or any other tightly packaged information – that support your insights, simplify your job as the presenter, and make it easy for the room to appreciate your message.

At times, a presenter dumps data or stories on the group without an organizing framework or clarifying idea. This confuses the room. Don’t do this (unless you’re the next Robin Williams). 🙂

Fourth, incorporate your introduction and transitions.

Choose and practice your opening and what you will say to move from one insight to the next. The introduction could be as simple as “Hi. My name is Dave. Today, I’m going to share three things related to bears.” Transitions could be simple phrases (“now to the second point”) or they could be brief stories that emphasize the insight just shared or introduce the relevance of the insight you are about to share.

My point here is less about the content of the introduction and transitions and more on the importance of simply deciding and practicing what you will say in advance. Practice out loud. Verbalize your opening and transitions. Help your brain and mouth work together to find the best word combinations. THIS WORKS. You will think of new and better ways to strengthen, tighten, and smooth the talk by practicing out loud, even by yourself.

Finally, construct a conclusion.

Well-constructed conclusions could be the most neglected part of the educational talks I’ve heard (and delivered). The conclusion is an opportunity to reinforce the most important points and manage the educational experience for the audience. This includes knowing what you plan to say after the Q&A concludes. You would rather choose the final thing heard by your audience than have the final thing be the product of a random question. This leaves too much to chance. Know your close.

##

Developing and delivering an educational talk – a presentation that shares or transfers knowledge, skills, and expertise from presenter to audience or from teacher to student – requires a clear understanding of your objective in the room and your audience. Having a clear, systematic process to organize and prepare your comments increases the likelihood of success in conveying your message to the group.

Good luck!

Ten Observations of Human Behavior and Learning

June 18, 2022 /

As a writer, I read a lot of books and articles, listen closely to how people talk, and take notes to capture ideas, lunch orders, and fun phrases. Here are ten observations and quotes from my scribblings with thoughts on how or why I found each to be helpful (or incomplete).

  1. Often, there is a “better” way to do things. It doesn’t really matter if you put your pants on with the leg left first or the right, but it is easier to put your pants on before your shoes. Early in my forestry career, I attended a “total quality management” workshop and Wayne, the instructor, drove home the point that there is often a “best” or “better” way to do a job, no matter your preference. “That’s called a good process. We’ve figured out better ways to use a chainsaw or drive truck, ways that are safer and more productive, so master those.” 
  2. A former Navy officer turned forest industry manager told me “As long as you have a cup of coffee in your hand or are carrying a clipboard, nobody makes you do anything.” In my experience, this reality holds up remarkably, unfortunately well.
  3. “The only real security we have is the certainty that we’re equipped to handle whatever happens to us.” I noted this quote after reading “Beyond Survival”, a book I’ve discussed before, by former Vietnam POW Gerald Coffee. This speaks to the importance of competence, self-awareness, and resilience. 
  4. Fill your days with activities that excite you. This is simply good advice. While we all have responsibilities and obligations, we can also have hobbies, friends, service, and work that, for at least part of each day, energize us. And if this is not the case, whose fault is that?
  5. “Self-trust is the first secret to success.” So said Ralph Waldo Emerson. The quote speaks to both the power of being comfortable in our own skin and the destructive nature of persistent self-doubt, anxiety, and insecurity, which all differ from humility. Having self-awareness and self-trust means you know how to handle yourself in most situations (see #3 above). 
  6. “Kind words can be short and easy to speak, but their echoes are truly endless.” – Mother Teresa.
  7. Avoid leaving good habits to chance. Since we are what we regularly do, we gain by scheduling and ritualizing productive habits, such as sleep, exercise, and date night to help reduce and crowd out less helpful activities, such as scrolling and stewing on social media.
  8. When we deal in specifics, we rarely fail. On the other hand, we rarely succeed when dealing in generalities. As an analyst, writer, and human, I find unsubstantiated, broad-based assertions to be extremely unhelpful.
  9. Learning is spaced repetition. I hold this belief as ironclad: we can get better at anything we practice regularly. However, since becoming a passable juggler and failing (so far) at piano, I observe that, while accurate, the lesson is incomplete. In addition to regular practice, we learn when (1) truly interested and (2) having sufficient understanding to “self-correct” basic errors. Once you learn enough to self-correct, you can become proficient at just about anything.
  10. Many things are more complicated and nuanced than we think. I find it helpful to acknowledge that (1) most decisions are made without certainty and (2) any increase in knowledge can (ironically) further increase uncertainty as it lays bare potential gaps in our understanding. As such, strong emotions, broad generalizations (see #8), and a failure to embrace proven approaches (see #1) can unnecessarily burden decisions. Embrace the idea that we’re doing the best we can with the information we have. Nothing is certain. As new information comes to light, we can adjust.