So! Someone has recruited you to set up a full InfoSec department! It is a totally green field site. They have said you are in charge. The CEO is security aware and wants to do the right thing. You have the budgetary authority to spend on people (but not tech) You can build a full security division if you want. What does it look like in your world - and with those massive doobies you would need to smoke to make this a reality

What do you think?

One of the biggest problems I have seen in security leaders is a total lack of confidence. Many feel that they have 'blagged it' into their roles. They admit that they have a loose idea of what to do (based on the perfect world of the cert industry) but no idea how to do it. Plagued by doubt, they cling to compliance or IT shit that they at least understand. This doesn't do anything for their confidence as they realise that it's all imperfect. Does that sound familiar to anyone?

These Friday things sure do roll around fast. Thank God for that. So...tell me something about security that you learned this week. It can be something about a theory, a specific area of practice or the industry. OR Tell me about some progress that you made towards a career goal. Let's go.

Which of the following is the biggest concern for you in your career?