Possibly, could also just be they were expensive to keep around and an MSSP wormed their way in with the promises of lower costs for the same compliance. The t

Possibly, could also just be they were expensive to keep around and an MSSP wormed their way in with the promises of lower costs for the same compliance. The thing about slowly firing your security people is that they're high risk; fire them one at a time with long notice periods and you could have a situation on your hands. Fire them all at once (hopefully with generous severance packages) and you avoid that problem altogether.