As an industry we use a lot of terms like security analytics, complex event processing and machine learning, but what does that mean and how can an organization begin to develop an approach to data sciences? What is required to build a sustainable data science program that enables enhanced threat management without requiring a team of Ph.D.s? Where are the quick wins and what does success look like?