Find Your Joie de Vivre at Work?

Joie de Vivre - exuberant excitement for life.   Wait a second, is it even possible to have that feeling at work?  Can anyone achieve this at all?  Not every moment in life can be so fulfilling and exciting.  I think we have moments that can be.  And those moments mostly happen outside of work.  Like graduating from college, getting married, having a baby, etc.  Is joie de vivre possible at work?  I think so.

We may never experience JDV in a meeting or during a performance appraisal.  But we might, just maybe experience it at other times while at work.

For example, I do a lot of shell scripting at work to automate a process, monitor a server, send alerts, etc.  The act of coding isn't JDV but the outcome can be.  I've often worked through lunch just to complete a function in a script that was giving me fits.  It was at that moment when I FINALLY got it to work that I felt a little JDV.  When my code finally did what I wanted it to do and it worked flawlessly I would throw my arms up in victory and lean back in my chair.  Pretty lame huh?

It's moments like that we can achieve JDV at work.

Another time I was digging and digging into a security issue.  It was one of those zero-day vulnerabilities of which there was no work around or patch for yet.  I knew the application was highly configurable and the vulnerability only affected this one small feature buried deep in its configuration.  After clicking and digging, researching and reading I found the vulnerable feature and turned it OFF.  Crisis resolved.  Victory lap around the building followed shortly afterwards.

Where it's difficult to experience JDV at work can be in those LONG projects that never end or with little to celebrate. My hats off to those who are stuck on the long treadmill at work with few victories to celebrate.

You may have experienced JDV at work lately - tell me what it was that allowed you a moment of celebration.

CISSP Code of Ethics - Nice but Necessary?

I overheard a conversation about a CISSP and his very poor choice of words cost him his $110,000+ a year job!  This so-called Director was a little too full of himself or maybe he was hiding behind his self-selected fancy job title when he thought it safe to run his big mouth at work one day.  He said things that aren't repeatable here that led to his own demise.  Did he get away with it?  Read on.  He was put on administrative leave while his supervisor and human resources decided how to handle the situation.  When he returned to work he was demoted to his original title and his pay was cut - really cut - he ended up in the $80k range. Ouch!  What else could he do?  He resigned in disgrace and joined the unemployed at a desperate time in our hurting economy.  With all his certifications (actually too many - could he be overcompensating for something he was lacking?) he found it difficult to find work right away.  What a colossal mistake to have said what he said while in a position of trust at work for all to hear!  What a fool to throw away a sweet job like that.

So what you say.  Happens everyday.  Well there is this little thing called professionalism followed by ethics that binds most of us to a upstanding level of service during our careers.  Not everyone can hack it.  Most of us can.  Certifications today require, no demand, we live up to a certain level of ethics.  If you work in IT and especially if you work as an Information Security professional you fall under public trust.  The public expects custodians of their data and the companies that collect it to be held to a higher standard than the average person.  International Informations Systems Security Certification Consortium (ISC2) manages the Certified Information Systems Security Professional (CISSP) program that ensures its recipients have the years of experience and pass the test to hold this prestigious certification.  It's one of the top ten best certifications you can have today.  ISC2 was also very wise to make the certification conditional upon the recipient agreeing to follow a code of ethics.  But why is it so important?  Isn't it more important to be a GREAT security professional than it is to hold high ethical standards?  I look at it this way.  You need to be both.  You need to be GREAT at your profession AND you need to be a GOOD person.  The world is full of slackers looking for a way to cheat their way ahead of others.  We see the greed in the news on a daily basis.  Thanks to the Madoff's and the Enron executives we have plenty of BAD people to beware of.  ISC2 put's it this way:

"The Pursuit of Integrity, Honor and Trust in Information Security

All information security professionals who are certified by (ISC)2® recognize that such certification is a privilege that must be both earned and maintained. In support of this principle, all members are required to commit to fully support the (ISC)2 Code of Ethics (the “Code”). Members who violate any provision of the Code will be subject to action by a peer review panel, which may result in the revocation of certification.The Code gives assured reliance on the character, ability, strength, or truth of a fellow (ISC)2 member, and it provides a high level of confidence when dealing with a peer member." 


So what makes it necessary for us to follow a code of ethics?  Who's going to catch me if I violate or break an ethics code or two?  More importantly who is going to turn me in?  We're all too busy.  Who wants to bother with that mess?  And what happens if we don't hold others accountable? Would it be like the wild west all over again?

For me it comes down to doing a job so well that I'm a hard act to follow.  I want a legacy that lasts well beyond my working years.  Knowing that I hold myself to a certain standard and code of ethics reassures me that I'm on the right track.  Because it's NOT ok to act anything but honorably, honestly, justly, responsibly, and legally.  It's NOT ok to create a hostile work environment like the individual in the opening paragraph did.  And it IS our responsibility to hold people accountable for the bad choices they make.  Especially when those choices hurt others and break the public trust of the positions they hold.

Yes, we do need a solid code of ethics to follow no matter what we do as professionals.  It's important to be GREAT at what you do AND a good person while you do it.

So what ever happened to that so-called director with the fancy title?  Well, he DID get to keep his CISSP.  However, he ended up with a BIG dose of the same medicine he was dolling out all those years.  For all the people he laid off, mistreated, abused and showed such blatant disregard for he was repaid with disgrace, shame and some might say - justice. What goes around comes around.