On Tue, 26 Mar 2002, Tony Wasson wrote:

...

...

If I was looking for top security talent, what would I ask for whether I was hiring directly or outsourcing?

I agree with Steve Wilcox, incidents are important. I would ask for a description of the 3 most interesting incidents they've ever worked on, and what they contributed.

I'm sorry, but that's confidential information and I can't disclose it. Would you hire a "security" person, who will likely be involved in the most embarrassing slip ups your company makes, if he tells people about "interesting" incidents at previous employers. Maybe, it depends on what he says.