A lot security issues will boil down to the CISO / consultant saying: You have to spend a lot more on your software infrastructure, hire more staff and keep shi

A lot security issues will boil down to the CISO / consultant saying: You have to spend a lot more on your software infrastructure, hire more staff and keep shit up to date and not use bottom barrel $10/hour offshored engineers. It will have to become company culture to keep shit up to date and do the basics in security. Like with equifax: https://arstechnica.com/information-technology/2017/10/a-series-of-delays-and-major-errors-led-to-massive-equifax-breach/ https://arstechnica.com/information-technology/2017/10/a-ser... And when that is the problem you have to deal with, it's more about executive buy in and management than it's about any sort of security expertise, and that seems fairly difficult to do at most companies with really large systemic security culture issues such as that.