“Without a proper security culture within the working environment, we cannot claim that our systems are secure.”
Asmaa Tellabi is a PhD student at Framatome GmbH/ University of Siegen researching cybersecurity for nuclear platforms. She spoke about building an active security culture and the benefits of certification on the job market.
How have you been able to pass what you learned in the WINS Academy on to your colleagues?
As was always described in the cybersecurity module, human beings are the weakest link in the cybersecurity chain. We can create systems and claim that they are secure and powerful, but we always forget the staff who are going to use it. The examples that came through my mind are passwords that can be found written on top of the computer station or the famous ‘123456789’ password. Without a proper security culture within the working environment, we cannot claim that our systems are secure, and this has been demonstrated by the cybersecurity attacks against nuclear power plants.
Building an active security culture that includes trainings, policies and work rules will absolutely make a difference. Currently, I am able to use what I learned from the WINS Academy in my day-to-day tasks and cybersecurity projects I am involved in as well as trainings. In projects, engineers from different specialities are working together and they won’t necessarily have cybersecurity knowledge, so whenever we are working together, I try to give some examples and explain the consequences a small gesture can have on the overall security aspects of the systems.
Why should early career professionals pursue certification?
Certifications keep you updated about the current technologies and trends within a specific field. A certification is the proof that you have acquired the right skills and knowledge in a certain domain. It allows you to develop yourself and your skills, building your confidence as well as getting better job opportunities. Becoming certified is one of the keys to getting hired because you don’t just prove that your skills match the job description but also that your are an expert in the field, and this will definitely differentiate you from the other candidates.
What was your WINS Academy elective? Why did you choose it?
The programme I choose was Cybersecurity in the Nuclear Industry. As I already have a Master’s degree in IT security and am currently pursuing a PhD in cybersecurity in the nuclear industry, this certification has allowed me to first gain a deep understanding of the nuclear basics as well as to expand my previously acquired knowledge related to cybersecurity to the nuclear domain.
“Becoming certified is one of the keys to getting hired.”
What inspired you to become a WINS Academy Ambassador?
I love challenging myself and pushing myself beyond my comfort zones. Before I started my PhD, I was told that the nuclear industry is a male-dominated field, and it was one of the reasons why I chose this field. I’ve been working and doing my research in this field as a woman for almost four years now. Proving to the future generation that certain fields are not dominated by a certain gender was my goal, and I have succeeded now by becoming a WINS Academy Ambassador. I want to show the future female generations that once we start believing in ourselves, we will start seeing different aspects of our personalities that we have never explored before.
In general, once we choose a certain path in our careers or lives, we will face many challenges and failures, we will doubt ourselves, and we will question our ability to achieve our goals, but this is part of the learning process, a way to grow and explore. We are bound to fail in life in order to learn and grow, but never to quit. My goal is to leave my footprint as a Moroccan woman, to show that women are capable of achieving amazing things if they believe strongly in themselves. A dream has no colour, religion or gender; it is made of determination, failures, motivation and self-confidence.
What advice do you have for enrolled WINS Academy learners who haven’t completed their programme?
I think that we should believe more in ourselves, our strengths, our capabilities and how far we can go if we give ourselves time to grow and to learn. I see learning as a form of growing, a way to see and understand things differently. I am a strong believer in second chances, but perseverance and motivation are the only keys to success. We should see learning as an active process in all aspects of our lives.
To be honest, I was scared at first because I had to pass two exams, one related to the Foundation Module and the second one on Cybersecurity in the Nuclear Industry. Once I started going through the chapters, I found myself learning new concepts and understanding all aspects of nuclear better. I guess the hard part is always the start, but after you start going through all the materials it gets interesting and easier. Currently, I am using the knowledge I acquired from this programme to teach all these new concepts and also apply them to the projects I am working on. Learning is a journey that has a lot of ups and downs; it requires patience and determination, but once you set a certain goal with a deadline it will be easier to achieve. My advice would be to try again; dedicate more time and concentration to it and you will definitely pass. Also, the way this programme was designed helps you to understand easily the related concepts even if you are new to this field.
From Framatome GmbH
How has your organisation benefitted from Asmaa achieving Certified Nuclear Security Professional status?
Framatome GmbH has appreciated the WINS programmes since spring 2015, when WINS workshops were organised before and after an IAEA conference.
We are happy that our PhD candidate Asmaa Tellabi had the opportunity to extend her formal IT security education with the nuclear cybersecurity specific trainings provided by WINS. Asmaa already took the chance to point out what she learned at WINS, e.g. in recurrent internal meetings with management participation and for Master’s students whom she has mentored.
“We appreciate the opportunities provided by WINS, including those for young professionals.”
What role does WINS certification play in your institution’s professional development programme?
Typically the PhD candidates and Master’s students have a formal education that did not include technical subjects from the nuclear domain. Accordingly, we appreciate the opportunities provided by WINS, including those for young professionals.
