In the midst of yet another round of layoffs, we have the continual growth of one of the most over-funded and worthless organizations in the company - Information Security. They just announced the hiring of a VP and Deputy Chief Information Security Officer from outside the company and are constantly hiring new L10 and L11 positions like "threat hunter" or crazy names that make it sound like we're the NSA over here.
The most ridiculous part of the org is that they don't own anything. They set policy and then leave it up to everyone else to enforce. They don't even monitor whether their policy is being enforced. In reality, Information Security is waaaaay overfunded, misguided, and staffed with a bunch of inept paper pushers.
So when people are given the boot in the coming weeks, don't be shocked if some of those dollars are reallocated to some cutting edge initiative that allows a contractor to sit in a "Fusion Center" and watch a bunch of TVs while writing a policy standard that will be shelved and never enforced.