You essentially can't evaluate that in isolation (looking at their past interactions with the infosec community may help). It gets better: you can't even depen

You essentially can't evaluate that in isolation (looking at their past interactions with the infosec community may help). It gets better: you can't even depend on the large players generally getting it right. If a large organization makes a bad decision with their first infosec hire, it's not a self-correcting problem - the next hires will be cut from the same cloth, and unless something blows up, almost nobody will know.