4 ms·
That's a pretty large generalization. There's a wide range of careers under the umbrella of what gets called Infosec. Some that really don't fit the definition
by raesene9 5y ago
That's a pretty large generalization. There's a wide range of careers under the umbrella of what gets called Infosec.
Some that really don't fit the definition of "auditor"
- Vulnerability research
- Pentesting
- Incident Reponse
- Threat Hunting
Even the type of Infosec work which can end up being closer to audit should have a different focus, if done well.
- pnutjam 5y agoYes, they "should", but they rarely do. My comment was largely directed at the type of infosec person any other IT person is most likely to interact with.
- raesene9 5y agoI'm not sure I'd agree with "rarely". There is some cross-over with auditing, but the infosec people (in my experience) are generally more risk focused than auditors who are more "rules" focused. Also I've worked with quite a few security people who have strong technology backgrounds and have worked in IT before moving to security, so definitely understand the frustrations of operational teams.