Most organizations in the United States do not have the luxury of employing a fulltime security professional to help them identify, manage and mitigate security risk. So, what typically happens?