Add reference file: Cybersecurity Consulting

[DogInfantry]

What's needed

Cybersecurity is now one of the fastest-growing consulting verticals across MBB and Big 4, but there's no reference file covering it.

File to create

skill/references/cybersecurity.md

What to cover

• Market size and growth (global cybersecurity spend ~$215B in 2024, growing 12–15% annually)
• Common consulting engagement types: zero trust architecture, SOC maturity assessments, incident response, MSSP selection, ransomware recovery
• Key frameworks consultants use: NIST CSF, ISO 27001, MITRE ATT&CK, CIS Controls
• Regulatory landscape: SEC cyber disclosure rules (2023), EU NIS2 Directive, DORA (financial sector), HIPAA for healthcare
• Economics: MSSP pricing models, breach cost benchmarks (IBM 2024: avg $4.88M per breach), cyber insurance market dynamics
• KPIs: MTTD, MTTR, patch cadence, vulnerability density, security ROI framing
• How this shows up in case interviews: cost-benefit of security investment, build vs buy vs outsource
• Watchouts: consultants confusing compliance with security; underestimating OT/ICS complexity

Ideal contributor

Someone with cybersecurity consulting, CISO advisory, or information security experience. Technical background helpful but not required — consulting framing is the priority.

Reference

See CONTRIBUTING.md for file structure and quality bar. Use healthcare-life-sciences.md as the depth benchmark.