And there is a further problem: you can't just create byrocracy to fix it. I don't want the company to suffer a breach, but as an employee I will be more intere

And there is a further problem: you can't just create byrocracy to fix it. I don't want the company to suffer a breach, but as an employee I will be more interested in showing that I have complied with the rules than in preventing the breach.