> if the security culture is weak-to-completely-non-existant, they'll likely be ignored? ----> > if the security culture is weak-to-completely-non-existant,

> if the security culture is weak-to-completely-non-existant, they'll likely be ignored? ----> > if the security culture is weak-to-completely-non-existant, they'll likely not even be budgeted or done.