As Randall Munroe has cleverly illustrated, a system is only as secure as its weakest point: https://xkcd.com/1200/ https://xkcd.com/1200/ IT administrators ca

As Randall Munroe has cleverly illustrated, a system is only as secure as its weakest point: https://xkcd.com/1200/ https://xkcd.com/1200/ IT administrators can secure everything under their control really well, but if a third-party web application used by employees is successfully penetrated, poof! IT infrastructure is now exposed to threats from the inside. Meanwhile, the only people who can evaluate and improve the security of that web application are the people selling the application.