When an organisation is looking to hire the information security professionals it needs, it should start by understanding what it is trying to achieve.
This will help to prevent one of the perception stumbling blocks and stop organisations from looking at purely IT security professionals.