Re: I wish this was a unique situation
Sadly, at the moment I can't think of a single organisation that has anything like in-house IT security-aware staff.
Don't worry. That is why they have this role/job outsourced to the likes of Capita or IBM.
Where is me coat again?