Summary
It’s not trivial to put an information security program together. Many programs are dysfunctional or non-existent, which contributes to the current state of business security. This chapter should have helped you understand the blue, red, purple, and CTI teams. An effective cybersecurity program requires organizational skills, knowledgeable, hardworking staff, strong leadership, and a very strong grasp of the cybersecurity niche.
In this chapter, we discussed the skills needed and what type of talent to recruit, and more importantly how to develop and retain that talent. In the next chapter, we will discuss how to manage such a team, as well as what indicators and metrics to set up to ensure the team is performing well and providing the organization with the most value.