I know people who work with trains. They have truly awesome mechanical systems but cobbled together to IT systems they weren't qualified to program and as awful

I know people who work with trains. They have truly awesome mechanical systems but cobbled together to IT systems they weren't qualified to program and as awful as you'd imagine and more - undocumented and unpatched. On the other hand management takes a complete 180 view to their stuff because a train derailment is extremely serious from a profit point of view, costing into the millions, and not so rare that they've never seen one. It ends up in a real weird jumble of still not acknowledging or patching anything but also being super serious about everything else like the hardware and train maintenance. I guess it's easy to point at a failed break and say that's the cause but WannaCrypt didn't cause any trains to derail.