by John Berry, Senior Consultant, Cutter Consortium

Reading job postings for senior security executives, you will certainly be exposed to a monotonous, almost boilerplate recitation of the requisite skills, experiences, and education sought by the hiring company. Less often will the job spec require the applicant to document the information security value delivered to the current organization for which he or she currently works. Why is this?