Re: Sizing the Information Security Department



Try looking into federal publication sites like NIST or other sources like SANS.

http://csrc.nist.gov/publications/PubsSPs.html

http://www.sans.org/reading_room/

Lots of information and will certainly have some guidance on IT staffing.
Good luck!