The Cybersecurity Control Playbook

Appendix DSME Security Team Structures

Small‐to‐Lower‐Medium Enterprise Security Team Structure

• In‐House Specialties:
  • IT Generalist with Security Responsibilities
  • • Manages basic cybersecurity tasks alongside general IT duties, such as maintaining user access controls, performing routine system updates, and responding to basic security incidents.
  • Network Administrator
  • • Oversees network infrastructure, including configuring and maintaining firewalls, routers, and switches to ensure network security.
• Outsourced Specialties:
  • Security Operations Center (SOC) Monitoring
  • • Provides real‐time monitoring of security events and alerts to detect and respond to threats.
  • Penetration Testing
  • • Conducts periodic security assessments to identify vulnerabilities that attackers could exploit.
  • Compliance Auditing
  • • Assists with meeting regulatory requirements by performing audits and providing guidance on compliance matters.

Controls Operated In‐House:

• User authentication and access management
• Basic endpoint security measures (antivirus, anti‐malware software)
• Routine software updates and patch management
• Implementation of security policies and procedures

Controls Operated by Managed Security Service Providers (MSSPs):

• Advanced intrusion detection and prevention systems (IDS/IPS)
• Continuous threat monitoring and incident response services
• Regular vulnerability scanning and management
• Compliance reporting and support for regulatory audits

Mid‐Medium ...