hero background image
Blog

Establishing a Security Culture in an Era of Innovation

08 February 2024
George Do, Chief Information Security Officer at Ada Infrastructure

Most industry headlines rightly focus on data center innovations, sustainability and efficiency advances, but security is due more attention. As cyber-attack methods become more complex, the industry must advance its approach to security by fostering a new generation of future-ready cyber professionals to protect the rapidly growing landscape of digital infrastructure.  

At Ada Infrastructure, we are focused on digital infrastructure that benefits technology, people, and the planet. This is why we are building a team of security experts who are not only eager to join a new company dedicated to building a sustainable and secure future of digital infrastructure but have the technical and human skills necessary to work closely with customers in pursuit of progress. Our team is dedicated to creating an environment that develops the skills necessary for this quickly evolving industry and our approach demonstrates the importance of a security-first culture. 

Security is a goal-based function 

Security teams are entrusted with protecting their organization’s most sensitive assets, the integrity of which has an outsized effect on business success. Protecting our customers’ vital information requires ingraining security into our culture. We can only accomplish that by viewing security not as an outcome in and of itself but as a goals-based function of our operations and at the forefront of our business.   

At a tactical level, for example, we have established a robust framework of security protocols to ensure our operations are resilient and reliable while also meeting the specific needs of our customers who are some of the world’s most transformative companies. This framework empowers all business functions to own and understand the risks associated with their work, instilling accountability. Intertwining business needs and data stewardship ensures our entire organization takes a security-first approach to keeping systems running reliably, which is what customers expect from their data centers.  

Security skillsets are multifaceted 

Maintaining a goals-based approach to safeguarding digital assets requires an incredibly skilled team. Our current security practitioners and those we’re looking for must be well-versed in security audits that comprise gap assessments, maturity assessments, and compliance with standards like SOC 2 Type II, ISO 27001, PCI DSS, and NIST 800-53. We don’t stop there. Interlocking these cyber skills with our business objectives is critical and is the core of our security strategy.  

Security professionals who understand the industry will also be able to embrace nuance and re-evaluate outdated ways of thinking. Namely, they must work to integrate physical data center security and cybersecurity as these areas are deeply interconnected rather than siloed. Both information technology (IT) and operational technology (OT) play a sizeable role in keeping data centers running, but the industry has long separated the two. Individuals and teams who can help account for both types of risk will keep data secure and available while protecting the next great innovations it can create.  

Communication skills are only becoming more important 

Technical skills remain paramount, but they’re no longer enough to achieve all business objectives. Today’s data center security practitioner is also a translator and liaison. They must be able to translate complex requirements to security controls, articulate risk, understand business impact and present at all levels, including business leaders, key customers, and external regulators.   

The ability to communicate will also help create a cohesive organization, especially when departments debate over priorities and resources. In this event, it falls on security teams to convey both to leadership and other departments why their needs merit attention and help to advance high-level objectives. As a result, interpersonal soft skills will be central to success and career growth in today’s data center industry. 

Accountability will enable the next generation of security practitioners 

Security teams are overlooked when things go well and saddled with full accountability when things go awry. That’s exactly why Ada Infrastructure’s security culture distributes risk accountability to everyone. This skin-in-the-game / shared fate approach ingrains safety into everyone’s day-to-day tasks, ensures the right teams are held accountable for the risks they assume, and properly assigns responsibility. Team members who understand the security impacts of their position and the skillset inherent to their role will be the cybersecurity practitioners of the future. 

We're a rapidly growing team that is developing digital infrastructure to drive the world forward and to be a positive force for good. We are actively seeking motivated individuals to join our team, driving the growth of our global data center business. 
 
If you want to join a team that's passionate about technology, people, and the planet check out our new careers page.

George Do,
Chief Information Security Officer at Ada Infrastructure

George has been working in the security field for over 25+ years concentrating on the development, maturity, and operational excellence of global security programs. Prior to joining Ada Infrastructure, George was CISO at Gojek, a Singapore-based financial technology company.  Before Gojek, George was CISO at Equinix for over ten years. He specializes in the transformation of security programs to achieve board and compliance readiness, winning and maintaining customer trust, and ensuring a strong security posture for the organization.

SHARE ON