A comment in Cisco's newly published 2015 Mid Year Threat report (http://www.cisco.com/web/offers/lp/2015-midyear-security-report/index.html?keycode=000854768) comments that: 'Lack of access to in-house security expertise is a key factor for the piecemeal or “patchwork quilt” approach that many companies take when building their security defenses', also supports the need for companies to define and use a Cybersecurity Management Program (CMP).

When staff shortages are rife having an operational program written down and followed will save time and will support the staff that the company still has perform the most effectively and efficiently they can - they don't have to continuously reinvent the wheel.

Using a CMP also supports elimination of a patchwork security defense, since it encourages a well-thought out, consistent and manageable approach to protecting information.