You Have Competition!
It's odd to think that as Information Security professionals, we have competition within our companies/organizations for the services we provide. One of the primary services most Information Security professionals provide is consultation on risk. In that area we have competition, but not in the manner that may initially come to mind. The choices for our internal customers for Information Security consultation include, but are not limited to:
1. Talking to other groups that may have some thoughts/input on security (such as QA, Technical Specialists, or even audit)
2. Avoiding us and using their own judgement on security risks
3. Outsourcing (such as Managed Security Service Providers, outsourcing, etc.)
Acknowledging that competition exists will sometimes help you maintain your customer focus, because you aren't the only option for your customers. If you strive to assist them and provide services to them, they will return. Of course there are instances where you must help the customer understand that a decision they are making is detrimental to security, but if you have already built up a reputation as a business focused group, your recommendations will be taken much more seriously.
What are your experiences?