Getting Started in Infosec Consulting: a beginners and beyond guide

I started my own InfoSec consulting practice (Armstrong Risk Management!) in July of 2023. Thankfully, I had a lot of industry experience, many contacts in infosec, a good relationship with multiple consulting firms, and some inkling of the business side from time spent working for other consulting practices.But what if you don't have all of that yet? Or what if you want to get started but don't know how to begin?There is actually a lot of groundwork that needs to be laid down up front. I had spent a lot of time networking, giving presentations, working with clients, etc. for years. This is essential groundwork. It requires some thought and deliberate effort.I have recently given some advice to others about how to get started consulting, and several have said "I wish I had spent more time networking in the community before now." It's really essential.If you are starting out in InfoSec - even if you have no intention of consulting in the near term - I highly recommend reading Ted's book. I love that he talks about a lot of practical points AND about the emotional intelligence side of the business.* How to negotiate* How to price things* Practical points for dealing with othersTed has a lot of real life experiences and case studies of those who have made a success of consulting. This really creates value because it's not advice and platitudes - it's examples that illustrate how you can apply these tips.Ted also does webinars and workshops - I recommend attending one of them. They are free, informative, and Ted is a great guy.

One of my last books of 2023 was "Getting Started in InfoSec Consulting" by Ted Demopoulos. A book to end an era and start a new one which not only allowed me to step into the journey of an experienced consultant but also serves as a treasure trove of insights for anyone embarking on a similar path.Demopoulos skillfully shares his wealth of knowledge, addressing the concerns and questions that beginners in security consulting might have.He simply lays out a well structured reading breaking down all the questions one may have when starting down this path and providing a real-world perspective that textbooks often missThis book has been instrumental. It's not just about the technical knowledge; it's about understanding the landscape, the challenges, the mindset, and the opportunities that lie ahead.If you're considering a career shift to Security consulting or are just curious about what it entails, I highly recommend this read!

I first met Ted in the mid-90s, when we were both consulting for the Hong Kong Jockey Club. At that point, I’d already been an independent consultant for several years and pretty much made all the mistakes Ted tells you how to avoid, in this book. From direct, personal experience, I feel safe in saying that, if you are even thinking about getting started as a technology consultant, read this book and pay attention to the advice. It will help you avoid lots of issues and cover the ones you do need to deal with.

Very informative and provides the basics while leaving me hungry for more. I would recommend this book to anyone looking to start consulting in information security.

Like his prior book "Infosec Rock Star", this book is not just for cybersecurity pros. "Getting Started in Infosec Consulting" contains a great deal of practical advise to anyone in IT or business looking at consulting in their chosen specialty. Ted describes different consulting models, a number of business basics, and what to consider as you negotiate terms and pricing. I definitely recommend this book as needed "food for thought" for anyone looking to move their career into another direction through consulting.

I have worked as a consultant for years, both "on the side" and "full time", both of which are discussed in the book. While my consulting field is not Infosec consulting, it is sometimes adjacent to it. I knew Ted in High School (he taught me how to use the paper tape reader on a teletype connected to a PDP-11 to record some simple programs), but I haven't seen Ted for decades.I saw a post on this book on LinkedIn (see Ted's section on marketing. -- he is preaching in the book what he practices in his own consulting business), and decided to take a look. I wish I had read this book when I first started consulting. It would have given me so many great ideas, and helped me avoid many traps for the unwary. That said, this is also a great book for someone who is even thinking about going into consulting. Ted gives both the pluses and the minuses, but for some it might contain the advice and information they need to confidently take the plunge. And like, Ted, many consultants I know wish they had gotten started sooner.The tone of the book is more conversational than technical, but it contains the wisdom that someone starting out might get from sitting with a mentor regularly during the first year of a consulting career. And the book has a web page with additional more in depth bonus materials. There were many lessons here that I had learned the hard way. And even now, the book gave me good ideas and made me think of things I should work on or tweak.The book's subtitle is right on in saying the book is for "Beginners and Beyond." I guess for someone who has been doing this for a while, it is like sharing war stories, lessons learned and best practices with a seasoned (and funny) consultant over beers. The book's dry humor is very engaging. I started this book while waiting for a World Cup match to start. And at some point I realized the match had started and I had missed the first goal. I guess for that reason, I am not too happy with Ted at the moment. But I loved the book. I would have paid many times the price for the kindle version. And when it comes out in hard/paperback form, I will buy some copies to give as gifts.

This book is very useful if you want to learn more about starting out in consulting. Ted demystifies a lot of the process around setting yourself up and selling your services. He has a lot of experience in this area and it shows in the range of practical examples and takeaways in the book.

Just started this book the last couple of days, and I am loving it so far. Already learnt a ton and really considering moving to consulting.Edit** Finished this book over the weekend and massively impressed with it. It's more of a runbook/playbook with some great actionable tips to get you started in this realm.If anyone is wanting to get into consulting (not sure in Infosec) it's a great book to keep coming back to.Would definitely recommend.Just need to get Infosec Rockstar now (the other book by Ted).

I found this book quite interesting because the steps outline isn't just for infosec consulting but can be pertain able to other types.