> Either pay-up for sec experts .. It's next to impossible to measure 'sec expertise'. This would only go far if the security expert gave a warranty on their

> Either pay-up for sec experts .. It's next to impossible to measure 'sec expertise'. This would only go far if the security expert gave a warranty on their service which we know is never going to happen. Besides which, the thing that would save this companies is mostly obvious and any half-decent security officer will do them. The difference being buy-in from senior management. https://www.cyber.gov.au/acsc/view-all-content/publications/strategies-mitigate-cyber-security-incidents https://www.cyber.gov.au/acsc/view-all-content/publications/...