Security teams hedge risk and respond to realized risk (security incidents). Unless it is the fuck ups of all fuckups, companies that fire security teams for a

Security teams hedge risk and respond to realized risk (security incidents). Unless it is the fuck ups of all fuckups, companies that fire security teams for a security gap that got hacked will never be able to hire a security team again that’s competent. They’ll get people trying to break into the industry, but not capable vets. Behind 99% of security incidents is a lack of funding, staffing, or “no we have to deploy to prod soon, sorry.” The very large sprawl that Series B -> pre-IPO sec teams have to address is staggering. Pre-IPO is usually the latest point that funding, staffing, support shows up.