ABSTRACT
As previously discussed, a portion of your security organization needs to be devoted to strategy formulation, risk management, policy development, governance activities, delivery of security architectures, and so on. This is where you need to focus your staffing dollars. Security is a high-demand field, but still relatively new, so the number of true experts is small (but growing). The high-impact areas mentioned earlier require a broadly skilled, motivated, and driven group of people to navigate effectively through the ever-changing landscape of security.
