In my experience it has been that the company cares about security but they keep hiring the cheapest contractors from India who know nothing about security and they introduce holes faster than onshore developers can fix them.
Either way, you can point to cost cutting as the underlying root cause.
That and IT is often seen as the redhead step child because they’re not revenue generating. I’ve had a purchase request for a single bag of zip ties denied before.
Plus security is one of those if everything goes right “what are we paying you for” and if something goes wrong “what are we paying you for” parts of the business.
In my experience it has been that the company cares about security but they keep hiring the cheapest contractors from India who know nothing about security and they introduce holes faster than onshore developers can fix them.
Either way, you can point to cost cutting as the underlying root cause.
That and IT is often seen as the redhead step child because they’re not revenue generating. I’ve had a purchase request for a single bag of zip ties denied before.
Plus security is one of those if everything goes right “what are we paying you for” and if something goes wrong “what are we paying you for” parts of the business.
Deny the request to fix their laptop or replace their broken mouse. I’ve found that usually works.
That doesn’t work when it’s the CFO denying the request.
Very true. It’s why IT shouldn’t report to the CFO (though it almost always does).