What is the BEST way to alleviate security team understaffing while retaining the capability in-house?
A.
Hire a contractor that would not be included in the permanent headcount
B.
Outsource with a security services provider while retaining the control internally
C.
Establish a virtual security team from competent employees across the company
D.
Provide cross training to minimize the existing resources gap
Explanation:
While hiring an indirect resource that will not be part of headcount will help to add an extra resource, it usually costs more than a direct employee; thus, it is not cost efficient. Outsourcing may be a more expensive option and can add complexities to the service delivery. Competent security staff can be recruited from other departments e.g., IT. product development, research and development (R&D). By leveraging existing resources, there is a nominal additional cost. It is also a strategic option since the staff may join the team as full members in the future (internal transfer). Development of staff is often a budget drain and, if not managed carefully, these resources may move away from the company and leave the team with a bigger resource gap.