https://www.lifars.com/2015/10/getting-infosec-team-right/
Getting Your InfoSec Team Right