Is your security organization busy or productive?

Are you a busy, or a productive security organization?  The difference between the two is huge.  Curious what I mean?  I discuss in my latest DarkReading piece: https://www.darkreading.com/vulnerabilities---threats/in-security-and-life-busy-is-not-a-badge-of-honor/a/d-id/1330818.

Do you also feel that solving real security problems isn't sexy?

Do you also feel that solving real security problems isn't sexy? My latest in @SecurityWeek discusses: http://www.securityweek.com/solving-security-problems-isnt-sexy. I hope you'll find the piece interesting and one that touches on an important point.