I'm not 100% sure that merging Fraud and Infosec is sustainable. I think there are areas where the shared responsibilities of defense make sense. I think for specific positions it may be easier than for others. e.g., EngineersI think for an architect there's too much additional context switching in domains that are already extremely broad. There are times when it feels extremely helpful, such as legitimizing the "let er rip" methodology. i.e., don't prevent, just handle through fraud. Just thoughts.