Yeah, the two most common forms of cyber security I've came across are: a) Don't know much, don't care much, don't really do much; or b) Super paranoid that w

Yeah, the two most common forms of cyber security I've came across are: a) Don't know much, don't care much, don't really do much; or b) Super paranoid that we're going to need really expensive consultants and buy really expensive products, and do lots of manual because automation is insecure, need to be on-prem, basically 10-15 years behind. Neither really patch servers, but often the guys that care are so behind the times they're actually worse.