Security team objectives

[jtk at depaul.edu (John Kristoff)]

On Mon, 30 Jul 2018 04:43:35 +0000
Ramy Hashish <ramy.ihashish at gmail.com> wrote:

> If you are going to start a security team in a newly founded IT
> organization, what will the objectives/results be?

Hello Ramy,

Management and organization buy-in is important.  Initially I would say
it would be helpful to do some internal education and awareness, which
helps with the first point.  Identify a few things you can improve upon
right away.  Some small obtainable achievements would help justify the
team if the team can point to some early success.  Then build up that.

FIRST.org, which is the original security team community, has a wealth
of very detailed guides and information you might look over:

  <https://www.first.org/resources/guides/>

John