"Companies are increasingly looking for individuals who have a business mindset and can make the connections among security, IT risk and business," says John Reed, executive director of Robert Half Technology.
No one knows risk better than the internal auditor, and so no individual has a better opportunity to add risk management value to organizations, says Richard Chambers, president of the Institute of Internal Auditors.
A two-year pay freeze isn't likely to hurt the government in hiring and retaining infosec pros. People often choose to work for the government for a higher cause, to play a vital role in protecting the national interest.
"The purpose and needs for these is to establish those same business tools for information security professionals to enable them to make better business decisions," Center for Internet Security Chief Security Officer Steven Piliero says.