Login  |  Register  |  Contact

Just Because You’re An Expert Doesn’t Make You An Expert

Had another one of those real world experiences today that was just begging for a blog post. A couple hours ago I was driving down the highway on my way to my physical therapy appointment when I saw a rollover car accident on the side of the road near an on-ramp. There were a bunch of bystanders, but the first police officer was just pulling up and there was no fire or ambulance in sight.

There is some good news and some bad news if you get in an accident by that particular on-ramp. The good news is it's right down the road from the Mayo clinic. The bad news is a lot of doctors drive on and off that ramp at any given moment.

Very few of them work in the emergency department.

I first became an EMT in 1990, went on to become a full-time paramedic, and have dabbled in everything from ski patrol to mountain rescue to HAZMAT over the years. I'm still an EMT, although not doing much with it since moving to Phoenix. If I'd knocked someone up when I got certified they'd be getting ready for college right about now. That is, to be honest, a little scary.

Since no responders were on scene yet I identified myself and asked if they needed help. The other bystanders, including the first doctor, stepped back (she was calling the patient's parents). The patient was looking okay, but not great, crying and complaining about neck and head pain. She did not remember the accident.

The next bit went like this:

DAD (Dumb Ass Doctor): Here, let's put this under her head [holding rolled-up jacket] Me: Sir, we don't want to do that. DAD: I'm a doctor. It's fine, she was walking around [Note, most patients who scramble out of their overturned car through the missing windshield wander around a little bit until someone sits them down.] Me: What kind of doctor? DAD: Anesthesiologist. Trauma anesthesiologist. It's fine. [Note, that means he puts trauma patients to sleep in an operating room so a surgeon can fix them.] Me: Sir, we have a patient complaining of head and neck pain with a loss of consciousness; you do NOT want to manipulate her head. DAD: I'm a doctor [inserts pillow, as patient cries out from the pain]. Gee [other doc's name] don't you remember that emergency training and the chain of command? Me: You're the doctor, can you gossip with your friends and stand over there now while I make sure she can still move?

For the record, I've never met an ER doctor in the world that will clear a patient's c-spine in the field with that mechanism (a rollover) and pain on touch and movement. I would never pretend to be able to anesthetize a patient, but this bozo, like many doctors, thinks he's fully capable of directing field treatment completely outside his experience.

Here's the thing;as professionals we train hard at becoming experts in a particular domain. This doesn't make us experts in adjacent domains. For example, I may be a security expert, but despite some broad knowledge I've specialized in certain areas, like information-centric security. If, for example, you needed me to read your IDS logs or deploy your UTM I'd send you to someone with practical network security knowledge.

When doing risk assessments or practical, on-the-ground security, make sure you engage the right domain experts before you break something. You may have kung-fu, but that doesn't mean you aren't a total freaking idiot.

—Rich

Previous entry: iPhone Security Tip: Never Memorize Wireless Networks | | Next entry: Best Practices For DLP Content Discovery: Part 3

Comments:

If you like to leave comments, and aren't a spammer, register for the site and email us at info@securosis.com and we'll turn off moderation for your account.

By Steve  on  04/28  at  06:54 AM

I’‘m a volunteer firefighter/EMT and I’‘ve run into a similar situation multiple times when I’‘ve rolled up on scene. The most memorable was a particular motorcycle accident (single bike, two people were riding it). Both individuals were thrown from the bike. The male patient had broken bones. The female patient was sitting up. Her leg was amputated and laying within about 10 feet of her. She was in shock and didn’‘t realize what happened to her leg. To make a long story short - a doctor was on scene before I arrived (family doctor). Clearly, he was clueless as to what to do in an emergency, pre-hospital situation.

The doctor was at a loss as to what to do to help the female patient. Once was stabilized her and prepared her for transport I went over to the male patient. Similar to your experience above, the doctor had no regard for spinal immobilization! It was a bit of a pissing match at first ... but the doctor backed off.

By  on  04/28  at  09:56 AM

If I’d knocked someone up when I got certified they’d be getting ready for college right about now. That is, to be honest, a little scary.

You do, of course, realize that "they’‘d be getting ready for college" in this sentence refers to the person you have knocked up and not the result of said knock up?

One thing about expertise and specialist, there are more of them as an industry matures. My grandfather is a doctor, when he was in general practice and family medicine in the 50’s he did everything from deliver babies to deal with dengue fever. Of course now you have OB-GYN’s and epidemiologist. Both of my uncle are doctors, one of them is an orthopaedic surgeon and the other is a ear, nose, and throat guy, although both of them could deliver a baby if forced to, my guess is that both of them would be as uneasy with the process as I imagine I would be.

10-15 years ago we had computer security people, they had broad skill sets and would talk about everything from configuring a firewall to managing a server to defining corporate policy (OK that last one is a joke, but you get the point), now a days these are not only separate disciplines with different set of specialists, they have completely separate markets.

This is representative of the balance between breadth and depth, the more there is to learn the harder it is to balance both, and of course with that comes the realization that all we know is that there is much that we do not know. In extreme cases people get hurt or die…in most cases we just look silly!

Of course no one has said this better than Clint Eastwood - "A man has got to know his limitations" - Dirty Harry

By Amrit  on  04/28  at  09:57 AM

If I’d knocked someone up when I got certified they’d be getting ready for college right about now. That is, to be honest, a little scary.

You do, of course, realize that "they’‘d be getting ready for college" in this sentence refers to the person you have knocked up and not the result of said knock up?

One thing about expertise and specialist, there are more of them as an industry matures. My grandfather is a doctor, when he was in general practice and family medicine in the 50’s he did everything from deliver babies to deal with dengue fever. Of course now you have OB-GYN’s and epidemiologist. Both of my uncle are doctors, one of them is an orthopaedic surgeon and the other is a ear, nose, and throat guy, although both of them could deliver a baby if forced to, my guess is that both of them would be as uneasy with the process as I imagine I would be.

10-15 years ago we had computer security people, they had broad skill sets and would talk about everything from configuring a firewall to managing a server to defining corporate policy (OK that last one is a joke, but you get the point), now a days these are not only separate disciplines with different set of specialists, they have completely separate markets.

This is representative of the balance between breadth and depth, the more there is to learn the harder it is to balance both, and of course with that comes the realization that all we know is that there is much that we do not know. In extreme cases people get hurt or die…in most cases we just look silly!

Of course no one has said this better than Clint Eastwood - "A man has got to know his limitations" - Dirty Harry

By pabica  on  04/29  at  06:31 PM

In my MBA courses a LONG time ago, I took a Business Law course…  and one of the points that stuck in my brain was that license = qualification in the eyes of the law… 

Doctors are licensed, therefore they have full qualification… or so the world believes… 

Good doctors, just like good security practitioners realize that their licenses / certifications just mean that they have demonstrated some level of competence… and they recognize their limits…  some..  some…


p.s.  I was an EMT for years, and have a handful of security certifications and try real hard to remember that certification != qualification

Name:

Email:

Remember my personal information

Notify me of follow-up comments?

Submit the word you see below: