“It’s good to have an independent group that stands back again to carry up the mirror,” says John McCumber, director of cybersecurity advocacy at (ISC)² , a nonprofit membership association for data protection leaders.You could locate that your organzation currently has people with all the skills you need, but they don't seem to be essential