Originally posted here by AngelicKnight
So, bad for in-house security specialists, good for entrepreneurs in the IT security field...
YES!!!!

Back to the case, every (well administered) company will keep a bunch of guys to "interface" with outsourcers. Its just not possible to a manager (or above) maintain a good outsourced infra strutucture (security included) without some "smart" guys inside.

Although im work as a bad guy (=outsourcer) i think

Total outsourcing = bad service

you should have some one to "watch" outsourcing (i..e me)