Security Chasm Illustrated

This is one of those “no comment” philosophical blog posts, inspired by some client conversations I’ve been having.

This is John, a CSO at a large Organization X	This is John, a CSO at a large Organization Y
Organization X has a security team. Inside it, there is an IR team. Inside it, there is a threat intelligence (TI) team Inside it, there is a team that focuses on malware reversing That team has 5 people.	Organization Y has a security team. It just has 5 people.

Now … think about it: do these people have anything in common to talk about, apart from their first names and [maybe] job titles?

P.S. Gartner stock photos used; any similarity with people real or virtual are purely coincidental.

Possibly related materials:

• Top-shelf Incident Response vs Barely There Incident Response
• My HITB 2010 keynote that focused on “security chasm” (slides)