Where does security fit in bi-modal IT departments?
When restructuring an IT department, the recent trend has been to look at possibly breaking it into two factions. One group that handles the daily tasks by putting out fires, and one that looks ahead in trying to create a new landscape that is immune to those fires.
The bi-modal idea has its benefits and its pitfalls but the determination seems to come down to the size of the enterprise. In the mid to smaller companies, there is not the luxury of splitting the security group out into subgroups. In the bigger companies the question becomes where do the security folks belong.
For Dale Denham, CIO of promotional products industry company Geiger, he believes security should sit in operations. An innovation team is focused on functionality, but an operations team would focus on making sure everything is secure, he said.