4 ms·
5 in 120 is 1 in 24. There are 30ish people at my company, and five of them are directly responsible for security and 20 or so are indirectly responsible... so
by dsr_ 9y ago
5 in 120 is 1 in 24. There are 30ish people at my company, and five of them are directly responsible for security and 20 or so are indirectly responsible... so I guess either we're very over-weighted or Uber is very under-weighted.
But you have to look at the threat models, the value of what you're protecting, and the surface areas that you expose. Without comparing those, no useful inferences can be drawn.
- CardenB 9y agoAssuming it scales linearly from 30 people to 12000 people? That's a stretch.
- baby 9y agoDifferent kind of companies have different needs, a security team doesn't scale like the HR team or the finance team or the ... it's really hard to figure out how much you need to employ. And when you have breaches and things like that, is it because you didn't have enough security employees? Or is it rather because its focus was bad? Or the employees were bad? Or because the branch tasked to secure the network was bad?