Tale of Two Possibilities

Cybersecurity and Information Technology (IT) departments serve different purposes. It should be a standard practice to generally maintain some degree of separation to ensure objectivity and independence in cybersecurity assessments and policy-making. This separation prevents conflicts of interest and ensures that cybersecurity measures are not compromised for the sake of IT convenience or cost-cutting.

We are always surprised how many organizations still bring these groups together.? The same people who create policy end up building compromised networks. This story cannot end well. It is time to read the end of the story first in order to write a new narrative that has a happy ending.