Role of a security team in an organization
The role and job scope of a security team also depend on the stage of the business. It can be part of the IT team at the beginning; a dedicated security team for infrastructure security monitoring, moving toward a specialized security function team for security tool development and security policy management; or a security testing team, and so on.
Let's look at two kinds of typical scenario to discuss the role and the scope that an organization may have. One is the security engineering team under a CTO, and the other is a dedicated CSO with full, specialized functions of a security team.
Security office under a CTO
This is a typical organization structure with the security engineering team under the CTO office. There are some characteristics of this kind of organization structure:
- No dedicated Chief Security Officer (CSO)
- The security team may not be big—for example, under 10 members
- The security engineering team serves all projects based on their needs...
