<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" ><generator uri="https://jekyllrb.com/" version="3.10.0">Jekyll</generator><link href="https://koredesec.me/blog/feed.xml" rel="self" type="application/atom+xml" /><link href="https://koredesec.me/" rel="alternate" type="text/html" /><updated>2026-10-16T23:51:08+01:00</updated><id>https://koredesec.me/blog/feed.xml</id><title type="html">KoredeSec</title><subtitle>Essays and notes from Ibrahim Yusuf (KoredeSec), security engineer.</subtitle><author><name>Ibrahim Yusuf</name></author><entry><title type="html">First Chair</title><link href="https://koredesec.me/blog/first-chair/" rel="alternate" type="text/html" title="First Chair" /><published>2026-10-16T12:00:00+01:00</published><updated>2026-10-16T12:00:00+01:00</updated><id>https://koredesec.me/blog/first-chair</id><content type="html" xml:base="https://koredesec.me/blog/first-chair/"><![CDATA[<p>Two administrations. 2024 to 2026. And now someone else’s name sits under “President, NACSS UNIOSUN.” I thought handing over would feel like relief. Mostly it feels like pride, with a little strangeness mixed in, like walking past a house you built and seeing new curtains in the window.</p>

<figure class="fig">
  <video src="/assets/blog/first-chair/naruto-seventh-hokage.mp4" autoplay="" loop="" muted="" playsinline="" preload="metadata" aria-label="Naruto in the Seventh Hokage cloak, looking out over the village"></video>
</figure>

<p>When I became the pioneer president of NACSS UNIOSUN, there was nothing to inherit. No past executives to call. No handover notes. No template for how a cybersecurity students’ association should run in our department. Just a name, a department, and a lot of students who wanted more than lectures and slides.</p>

<p>Being first sounds glamorous. In reality, it means every decision is the first decision. What does the association stand for? How is the executive team structured? Who handles what? How should our announcements even sound? There was no “how we’ve always done it.” We were the ones writing it.</p>

<p>I think it really hit me when I realised that the decisions we were making would outlive our administration. We weren’t just organising events or filling executive positions. As the pioneer administration, we were setting the standards, building the structures, and creating something the next set of executives would inherit. That responsibility changed how I looked at the presidency.</p>

<figure class="fig fig-tall">
  <img src="/assets/blog/first-chair/executive-team.jpg" alt="Members of the NACSS executive team talking in the red auditorium seats" loading="lazy" />
  <figcaption class="mono">Planning with the executive team.</figcaption>
</figure>

<p>So we built. Cyber Fairs with live demos and students crowding around screens. Bootcamps that pushed people past theory and into actual hands-on work. ISC-related training. Hackathons. And NACSS Week, which grew into the biggest thing on our calendar.</p>

<p>If I learned one thing from all of it, it’s this: students don’t need another motivational speech. They need reps. Hands on keyboards, a problem in front of them, and someone saying “try it, break it, try again.” The moment someone pops their first shell or catches their first phishing indicator, you can see it click. That look is why I kept going.</p>

<figure class="fig fig-wide">
  <img src="/assets/blog/first-chair/cyber-fair.jpg" alt="A speaker on stage at Cyber Fair 2.0 in front of a full auditorium, under a banner reading Defending Tomorrow: AI Meets Cybersecurity" loading="lazy" />
  <figcaption class="mono">Cyber Fair 2.0: Defending Tomorrow, AI Meets Cybersecurity.</figcaption>
</figure>

<p>Then there’s the part nobody sees. Writing announcements and presidential messages late at night. Coordinating an executive team across academics, technical, events, admin and comms, each with their own pace and problems. Representing the department at FOCITSA meetings. Even pushing NACSS merch, which sounds small until you see students wearing it and realise the association has become something people want to belong to.</p>

<figure class="fig">
  <video src="/assets/blog/first-chair/gojo-and-students.mp4" autoplay="" loop="" muted="" playsinline="" preload="metadata" aria-label="Gojo walking down the street with Megumi, Yuji and Nobara"></video>
</figure>

<p>I learned that leadership is mostly communication. Not big speeches. Clear messages, sent on time, to the right people.</p>

<p>Elections taught me the hardest lesson. Eligibility rules had to be spelled out clearly, and when things got tense, my job was to ask everyone for calm and respect for the process. You can’t please everybody in an election. Your job is to protect the process, not to pick the outcome. That one stayed with me.</p>

<p>Here’s how I think about being a pioneer now. It’s like deploying on bare metal. No base image, no config, no runbook. You set the baseline yourself, and everyone who comes after inherits your defaults, the good ones and the bad ones. That’s the real weight of going first: your defaults become someone else’s normal.</p>

<p>Somewhere along the way, people noticed. Departmental President of the Year at FOCITSA, an Award of Service, and a couple of analyst awards I’m still a little surprised by. I’m grateful for every one. But the thing I’m proudest of is quieter than any plaque: when my tenure ended, there was a structure to hand over. A real transition, not a shrug.</p>

<p>Passing it to David felt right. The association doesn’t belong to me. It never did. My job was to build something that could outlive my time in the chair, and watching someone else take it forward is how I know it worked.</p>

<figure class="fig fig-tall">
  <img src="/assets/blog/first-chair/awards-night.jpg" alt="Black-and-white photo from awards night: holding an award plaque, head bowed" loading="lazy" />
  <figcaption class="mono">Awards night.</figcaption>
</figure>

<p>These days I’m out of school and working in an MSSP, staring at alerts instead of event budgets. Funny thing is, the lessons carry straight over. Communicate clearly. Build the baseline right. Protect the process. I’m excited about where I am, but I’m not comfortable. There’s still a lot to build.</p>

<blockquote>
  <p>“Society grows great when old men plant trees whose shade they know they shall never sit in.”</p>

  <p><cite>Greek proverb</cite></p>
</blockquote>

<p>So if you’re the first one to try something, in your department, your family, your city, start it anyway. It will be messy. Nobody will hand you a manual. Write one, then leave it better for whoever comes next.</p>

<p><strong>That’s what the first chair is for.</strong></p>

<figure class="fig">
  <video src="/assets/blog/first-chair/gojo-blindfold.mp4" autoplay="" loop="" muted="" playsinline="" preload="metadata" aria-label="Gojo lifting his blindfold, his eyes lighting up"></video>
</figure>]]></content><author><name>Ibrahim Yusuf</name></author><category term="Leadership" /><category term="NACSS UNIOSUN" /><summary type="html"><![CDATA[Nobody hands you a manual when you're the first one.]]></summary><media:thumbnail xmlns:media="http://search.yahoo.com/mrss/" url="https://koredesec.me/assets/blog/first-chair/cyber-fair.jpg" /><media:content medium="image" url="https://koredesec.me/assets/blog/first-chair/cyber-fair.jpg" xmlns:media="http://search.yahoo.com/mrss/" /></entry></feed>