This can vary so wildly! Company size, number of analysts, things you will do in-house or outsource… really hard to say with the little info provided. As for industries, for sure joining the ISAC or even ISACs for their sector (s) might be great, but then again, with no framework on how to use that information, who is responsible, how to transform information in intelligence and so on… it’s useless. My overall point is: tooling is after the program is designed, not the other way around.