lcamtuf’s thing • 8774 implied HN points • 12 Feb 25
- Many companies don't prioritize hiring security teams until after a major security incident happens. This means their first security personnel often lack experience to build strong security programs.
- Over time, security teams can become rigid and focused on their own tasks rather than aligning with broader business goals. This may lead to them missing urgent risks.
- When a major breach occurs, it can finally highlight the weaknesses in security strategies. This often leads to a change in team structure and a chance to improve communication within the company.