Embed Notice

First, when GAO and NIST require centralized management of the cyber workforce, they create a perverse incentive for departments to centralize the workforce itself, not just its management, because it's easier to centrally manage a centralized workforce.
This results in departments failing to recognize and act on the importance of embedding cyber experts throughout the department.
Recommendation: Every IT-focused office anywhere in the department should have cyber staff.
🧵2/4