Not only does security need to be scalable and cost effective, but thanks to the marketing messaging behind virtualization and cloud capabilities, boards expect that security resources can also be increased or decreased at a moment's notice through a virtual dial that is constantly being adjusted to achieve perfect harmony. What's the biggest challenge? Communication of security value vs. the spend and the resultant outcomes. What's the next big challenge? Demonstrating that security can manage KPIs like the rest of the business, and can increase or decrease spend according to business risk. Success has been achieved when the resources (people, time, and money) utilized to run security operations can be re-deployed at a moment's notice based on risks, threats and policy decisions that take place between budgeting cycles. The re-deployment is easily documented and visualized to show the outcome.