THE SECURITY RESEARCH PRODUCT FUNCTION

Summary from the TLDR InfoSec newsletter

Zack Allen discusses the place and responsibilities of a Security Research team in security products. In security products, the security research organization can be thought of as the CTO of a product line in that the business needs engineering to inform product decisions, designers to communicate complex security topics to end-users, and work with marketing to maintain the veracity of materials. Allen also shows how the Kano model of product development can be applied to demonstrate the must have features, satisfied features such as updated rules, and wow features such as being the first to discover a new threat actor.