Paint-Drip

An agile skills profile where a person has broad, general capability across many areas (the paint) with a few deeper specialties that drip down. Also known as broken-comb, it enables cross-functional work, swarming, and flexibility by reducing single-skill bottlenecks.

Key Points

  • Wide base of knowledge paired with several deeper spikes of expertise.
  • Supports swarming and reduces handoffs by letting people contribute across tasks.
  • Differs from T-shaped (one deep area) and comb-shaped (many uniform depths); paint-drip has uneven depths.
  • Improves capacity balancing, cross-training, and resilience when priorities change.

Example

A developer in a Scrum team can do basic UI, write acceptance tests, and help with deployment, but has deep skill in backend APIs and test automation. When a testing bottleneck appears, they shift from coding to expand automated tests, keeping flow smooth.

PMP Example Question

A Scrum Master wants a team member who can help with many tasks but has a couple of deep specialties to address bottlenecks. What skills profile best matches this need?

  1. I-shaped specialist with a single narrow expertise
  2. T-shaped generalist with breadth and one deep area
  3. Paint-drip profile with breadth and a few deep drips
  4. Component team focused on one subsystem

Correct Answer: C — Paint-drip skills profile

Explanation: Paint-drip (broken-comb) combines broad capability with multiple deeper areas, allowing flexible contribution and targeted depth where needed.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Run the drill before the incident runs you

Design, run and prove OT drills and tabletop exercises before an incident tests your team. OT Incident Drills and Exercises includes 24 lessons and practical exercise materials, delivered through HKSM Courses for US$47 one-time. 30-day money-back guarantee when 50% or less of the course has been consumed.

Explore the Course