Never Assume Anything: Stacy O'Mara on Policy, Breaking Into Cyber, and Why Basics Still Fail

From Capitol Hill to cybersecurity leadership, Stacy O'Mara's career journey proves you don't need a technical background to make a significant impact in cyber. In this episode of Inclusive Cyber, Stacy shares how she transitioned from political science and public policy into becoming a trusted advisor helping governments and Fortune 500 companies navigate the complex intersection of cybersecurity, business risk, and national security. Her candid insights on mentorship, education, and the evolving threat landscape offer a roadmap for anyone looking to break into or level up in this field.
Key Themes

1. You Don't Need a Technical Background to Succeed in Cyber. Stacy built her cybersecurity career from a foundation in political science and public policy, proving that diverse skill sets like communication, policy analysis, and strategic thinking are invaluable in this field.

2. Find Mentors Who Fill Your Gaps. Rather than seeking mentors who mirror your strengths, identify your weaknesses and build relationships with people who specialize in those areas to become a more holistic professional.

3. Education vs. Certifications Depends on the Role. Technical certifications matter for hands-on roles, but blended programs combining policy and operations can open doors for those pursuing strategic or advisory positions.

4. AI Will Amplify Defenders, Not Replace Them. Generative AI offers cybersecurity professionals the ability to 10x their output on tedious tasks, freeing them to focus on higher-level strategic work and reducing burnout.

5. Basic Cyber Hygiene Failures Still Dominate Breaches. Despite industry maturity, organizations continue to fall victim to preventable attacks because of gaps in fundamentals like multi-factor authentication, password management, and patch updates.

SHOW NOTES
------------------------
Books
Ghost in the Wires by Kevin Mitnick
The Awakening by Kate Chopin