In reply to Thomas Gilheany.

Tom,

You are spot on. In fact our initial focus has been just that the small to medium size businesses. What we are finding is that some are willing to take on the tasks while others are looking to outsource. The university I am working with has built its own SOC and staffed it with student interns and seasoned vets. In this situation everyone wins...customer gets the security services they need in alignment with the NIST CSF, The interns get the degree, certifications and experiences they need to land a job and the university creates a revenue stream to fund future interns with apprenticeship programs.