This post got a little long, although still not comprehensive, but I hope it provides insight into how security teams work (or don’t) at organizations everywhere, and how we (on all sides) can improve.