Why is it important to have Hung? Work at ŠKODA AUTO, incident detection, logs and World of Warcraft

Many people still imagine cybersecurity as a world of hooded hackers, flashing terminals, and dramatic system breaches. The reality in large companies looks different. Often decisions are made about whether you even have the data. Whether the logs are flowing correctly. Whether the analyst has anything to work from.

The guest of this episode of CZECH CYBER TV podcast was Hung Ngo – IT Security specialist, Czechitas instructor and the author of the KYBERKECY podcast. We talked about his work at ŠKODA AUTO, specifically in security operations, where one thing is key: visibility.

Without logs, security is blind

Hung describes a role that isn’t visible at first glance. He does not analyze incidents directly, but ensures that analysts even have something to analyze. He collects data from systems, configures logging, normalizes different event formats and helps create parsers that unify the view of security information.

If data isn’t flowing correctly, incident detection simply doesn’t work.

And this is where it becomes clear that cybersecurity is not only about technologies, but also about processes, communication and understanding how individual systems operate.

AI in security: helper and source of noise

In the interview we also touched on the use of artificial intelligence in detection. AI today can help with analyzing behavior patterns or with normalizing logs. On the other hand, it also brings false alarms and can generate a lot of noise.

Without quality data and properly set up processes, even the best algorithm won’t help.

World of Warcraft as a school of leadership

A perhaps surprising part of the interview was about World of Warcraft. Hung openly talks about how playing online games helped him develop organizational and communication skills.

Coordinating dozens of people in a raid, planning, responding to individual mistakes – all of this has parallels in the real world of security. Cybersecurity is not isolated technical work. It’s a team discipline.

Community and education

Hung is also one of the organizers of B-Sides Prague and an instructor at Czechitas, where he helps new people enter the field. In the interview we discussed why it’s important to give back to the community, how reskilling programs work and why communication in security is as important as technical knowledge.

Another part of the interview, where we talk about entering the field, career beginnings and specific recommendations for students, is available for subscribers of CZECH CYBER TV+.