To the HN mods: the actual title of this article is “How to level up your organization's security expertise”, but it has been editorialized in this submission.