Conversation

Notices

1. Embed this notice
   Greg Wilson (gvwilson@mastodon.social)'s status on Saturday, 10-Aug-2024 02:12:12 JST Greg Wilson

   I have tried twice to put together a hands-on full-day "security for data scientists" tutorial but am finding it just as hard as a "systems programming/devops for data scientists" tutorial: the topics are so scattered and disjoint, and require so much random background knowledge, that the material doesn't hang together and will probably just frustrate participants. I would be very grateful for pointers to open-access lessons on either topic that actually work - thanks in advance.

   • Embed this notice
     Eaton (eaton@phire.place)'s status on Saturday, 10-Aug-2024 02:12:11 JST Eaton

     in reply to

     • rzeta0

     @rzeta0 @gvwilson This. “Explain the big picture of the domain/work/etc, then explain how the area of focus for the training impacts it, then putline what aspects we’ll be covering” has served me well for a lot of bootstrapping-knowledge style classes and curriculum

   • Embed this notice
     rzeta0 (rzeta0@mastodon.social)'s status on Saturday, 10-Aug-2024 02:12:12 JST rzeta0

     in reply to

     @gvwilson

     In my experience starting from the conceptual "big picture" of risk (assessment, appetite, management, etc) ...

     Then within that painting the picture of common tasks, governance, controls, validation, etc .. provides a useful "map" that is applicable to any scenario.

     Then finally "instancing" these with examples specific to data science, engineering and app dev illustrates the concepts.

     The bottom up approach too often seen in the dev community isn't helpful in my experience.

   • Embed this notice
     Greg Wilson (gvwilson@mastodon.social)'s status on Saturday, 10-Aug-2024 02:22:00 JST Greg Wilson

     in reply to

     • Eaton

     @eaton thanks - do you have any pointers to open-access lessons that demonstrate this approach for security and/or devops, preferably designed for one-day workshops?

   • Embed this notice
     Eaton (eaton@phire.place)'s status on Saturday, 10-Aug-2024 02:22:00 JST Eaton

     in reply to

     @gvwilson unfortunately, no; the space I’ve worked in is almost entirely focused on other kinds of tangly overlaps; didn’t mean to clutter up the replies to your (excellent) question!