Resource Management (In-House versus Outsourcing)
The last core strategy we will cover is the management of your resources. We briefly discussed skillset challenges in Chapter 1, Current State, and touched upon defining the cybersecurity organization in Chapter 2, Setting the Foundations, which covered a little on outsourcing and roles and responsibilities. In this section, we will go into more detail about the management of resources and some points to consider as to why you will want to be strategic with your resources.
As stated previously, my preference for resource management has been to keep the brains of your operations in-house and to outsource the moving parts. In principle, outsource those easy-to-complete repetitive tasks while your in-house team designs (architect), builds (engineer), and executes your strategy. Essentially, you would be looking at a hybrid model for your resources. As much as it would be ideal to bring everything in-house, there will be limitations...
