Related Posts
McKinsey & Company Hi all! Any fishes at BCG and/or McK have time to chat sometime within the next few days/weeks?
I’m a consulting analyst at Accenture, really interested in strategy work (mainly tech/software clients but open to all backgrounds) hoping to make the jump some time next year. I’d very much appreciate connecting to understand your journey with the firms and the work you do.
Thanks in advance, and happy holidays!
Boston Consulting Group McKinsey & Company
Hi Dear friends,
Iam planning to do certification that don't have no programming AND IT SHOULD have very good scope inmarket and able to switch within tcs with high package, please suggest me that kind of certification.TIA 🙏 Accenture Infosys IBM Amazon Tata Consultancy Bosch Group Hexaware Technologies PwC India Oracle Hitachi
More Posts
Hi Guys, I am 5.5 years Java Developer and I have offer from JPMorgan Chase and Walmart .
Jpmc: 50% on current fixed + jpmc benefits Walmrat: 50% on current fixed + yearly bonus + stocks.
Please help me choose which will be better, mainly looking for brand value, work life balance and yearly hikes.
Additional Posts in Cyber Security Bowl
Tell me it’s not true.

New to Fishbowl?
unlock all discussions on Fishbowl.



I am a McK vet and a cyber partner at PwC. All the MBBs struggle here as they do not have staff with years of cyber experience so even assessments and strategy can be seen as uninformed and easily contested by the CISO (who carries a lot of weight due to the scarcity of good ones and the premium a quality CISO can command).
This hurts their credibility even in areas such as Cyber Org, Operating Models, Ops Improvement, etc. all of which are key strength of theirs outside of cyber.
Their fee structure can also be challenging for them. This is especially true in more hands on keyboard areas such as controls implementation, testing and such. Incident Response is something they really won’t be able to do with their present approach and this limits an attractive entry point to larger remedial work.
All the MBBs should focus their cyber efforts as adjuncts to their strong Digitial Tranformation business.
That said, I’m confident the MBBs will sooner or later figure it out as they are smart, well funded, think longer term and know they need relevancy in this area. It will just be painful, success will be decidedly non-linear and will require them to step out of their comfort zone.
They will all need to bite the bullet and bring in senior people (Director/Senior Partner) with credibility and the ability to pull quality people people from other firms. This will definitely be a cultural challenge for them. In the 1990s McK bought a firm that became the BTO and gave them credibility in IT. It was a multi-decade effort to truly integrate them due to the unique culture of MBBs. They may have to do this again for cyber.
Thank you! Why do you think they need relevancy in cyber? In my opinion cyberstrategy is a nascent market with strong competition and there is a risk of diminishing their brand because of lower quality work
Mentor
Most individuals at cyber firms don't know who the MBB are and most hate consultants.
I’ve seen MBB do some cyber related work but I think it’s more of a management oriented cyber work
McK is the only group I've seen in MBB do pentesting, and that's exclusively internal.
In the arena of implementation and hands-on maturity development work, Big 4 firms tend to get a lot of work in addition to specific vendors (e.g. CyberArk, FireEye) or boutiques (e.g. Trimarc).
For strategy, I see a lot of competition between Big 4 and MBB.
For proactive services, I see a lot of work going to boutiques (CrowdStrike, Mandiant, SpecterOps etc).
Tl;Dr depending on the area you're looking at, MBB has a relatively small breadth of coverage, but are high performers in their fields. Most people I talk to have no idea what MBB even means.
Agreed PwC 1. I'm a Senior Consultant at Mandiant and I do many protective services, IRs and strategy. For almost every engagement, I'm touching a keyboard.
In my firm, MBB services aren't really taken on until the Director level or higher.
I don’t think they are viewed highly by the cybersecurity organizations of companies. Cybersecurity is a specialized field and companies with a cyber background (like my employer) or a tech background (like Accenture or IBM) are seen as the best
BCG/Mck doesn't do technical work like pen tests or IR. Our cyber people are management consultants more likely to engage with WEF than def con.
My impression is that Bain's "cyber" people are mostly PE with industry exposure.
Impression-wise, D1/D2 are about right.
Great, great PowerPoint with amazing access to data on things like spend metrics. Otherwise, absolutely forgettable based on the McK work I had to deal with at a client briefly...
Thanks for the replys. I'm looking for a place which has a strong cyber strategy practice. Since mbb does mainly strategy work I was wondering if they also did cyber.
Seems that Deloitte and Accenture are better choices for this.
^ on top of this, the pricing models really do have an affect on the work. As PwC 2 mentioned, MBB is extremely expensive. Why should I hire them to implement a solution when Accenture can charge a similar cost for several more months of hand-holding and assurance that everything is done properly?
Accenture has a lot of highly technical people, and I see a lot higher percentage of hands-on work there. Unfortunately I don't have a lot of proposal experience so I haven't seen the strategy side of the competition