What is the BEST way to alleviate security team understaffing while retaining the capability inhouse?

A.
Hire a contractor that would not be included in the permanent headcount

B.
Outsource with a security services provider while retaining the control internally

C.
Establish a virtual security team from competent employees across the company

D.
Provide cross training to minimize the existing resources gap

Explanation:

While hiring an indirect resource that will not be part of headcount will help to add an extra

resource, it usually costs more than a direct employee; thus, it is not cost efficient. Outsourcing
may be a more expensive option and can add complexities to the service delivery. Competent
security staff can be recruited from other departments e.g., IT. product development, research and
development (R&D). By leveraging existing resources, there is a nominal additional cost. It is also
a strategic option since the staff may join the team as full members in the future (internal transfer).
Development of staff is often a budget drain and, if not managed carefully, these resources may
move away from the company and leave the team with a bigger resource gap.