[heroprotagonist]

That's fair, I definitely don't have a global insight. Security teams are usually segmented in some way, rather than monolithic, with varying levels of competency among different teams.

They do periodically put out some interesting reading. If you want to look at it, their annual Data Breach Investigations Report are worth checking out:

http://www.verizonenterprise.com/verizon-insights-lab/dbir/

(prior year reports don't require registration and are still fairly applicable)

[086421357909764]

I once had verizon admit they'd oversold their capabilities for Incident Response and security consulting and were in dire need of support. Of course they wanted bottom barrel rates at $140 an hour.. seriously. Naturally we turned away from the opportunity as it wouldn't be profitable. I'm not convinced Verizon is anymore secure than Sony after that call ....