I agree with you 100% and have attested to the same claims on other threads. With small exceptions, businesses exist to make profit. The whole discussion going

I agree with you 100% and have attested to the same claims on other threads. With small exceptions, businesses exist to make profit. The whole discussion going all the way back to the original terms should be recast as "ROI positive centers" and "ROI negative centers". From that perspective I would agree, it's better to be working for an "ROI positive center" in the company. And even though it might seem the security compliance department is ROI negative, if the alternative is being shutdown by a government agency or paying heavy fines then it really is ROI positive; it just might be harder to make those calculations up front.