There is a lot of obvious work done by cyber security teams. The obvious work includes monitoring, implementations, threat hunting, and the like.
That said, there is a lot of cyber security work that takes place in the white space as well, the less obvious places, the quiet tasks that move your cyber program.
Reviewing vendor security questionnaires.
Answering phishing questions.
Analyzing risks in new business acquisitions.
Evaluating new tools for the business.
These consume time too and generally scale with the growth of the business.
The more that you can capture the white space tasks your cyber team performs, the more that you can plan and resource for them. Or eliminate the ones that have nothing to do with the core function of your team.
The ones that align to cyber security might be yours to own.
Follow me on Twitter for discussion and the latest blog updates: @Opinionatedsec1. Or, start your own discussion using #crazygoodcyberteams on twitter or Linkedin and I'll read it.