Bringing in the latest trendy cyber sec firm is no substitute for knowing things about your own asset inventory and network. But, no, must concentrate on developing core capabilities and outsourcing other stuff... Goddammit, Infosec in an information driven business IS a core activity.
One day they'll learn. AC because reasons.
Biting the hand that feeds IT
