You are the Information Security Manager of HDA Inc. You are seeking the most effective strategy to handle the shortage of staff in the security team while ensuring the internal retention of capability. What is the most effective approach to address the shortage of staff in the security team while maintaining the capability internally?