News for hackers. Stuff that matters.
Re:U.S. has almost 500k job openings in cybersecurity by extrapickles on Thursday May 20, 2021 @08:41AM (#27220364)
Security unfortunately is a creative process, which is hard to get consistent. I would love to use something like statistical product control, but I have yet to see a good way to apply it (or similar techniques) without forcing pen-tests to be “follow the checklist”.
Re:U.S. has almost 500k job openings in cybersecurity by extrapickles on Thursday May 20, 2021 @09:21AM (#27220764)
I should add that burnout is a massive problem when it comes to quality. Even if you found a good consultant (or group of), for round #2, they could have just finished testing all of your competitors products and are now worn out.

Scheduling in variety to try and prevent partial burnout is difficult if everyone in a vertical only wants to use the same person.