The short (and sad) answer is that no one really cares about security; they only care about it when something hits the fan. Security isn't a revenue driver, on

The short (and sad) answer is that no one really cares about security; they only care about it when something hits the fan. Security isn't a revenue driver, only a cost. It's commonly known that most companies (small or large) vastly prefer investing in things that increase revenue and profit.