This is exactly the attitude to which I’m referring. If you don’t understand that engineering is the fundamental bedrock of IT and the lack of security applica

This is exactly the attitude to which I’m referring. If you don’t understand that engineering is the fundamental bedrock of IT and the lack of security application during the engineering SDLC is a consistent failure then I don’t know what to tell you except maybe to gain more experience in software engineering and read more about data breaches. Cyber security: https://en.m.wikipedia.org/wiki/Computer_security https://en.m.wikipedia.org/wiki/Computer_security But for arguments sake let’s just stick to network, application, mobile and IOT security. - Why is MFA not on by default? - How many devs have prod credentials published to Github.com right now? - How many unsecured IOT devices are there? - Why is email security such a dumpster fire? - How many companies have an SSDLC? - How many companies require separation of duties and approvals before a dev publishes another AWS bucket or some other unprotected data store to the web? Go ahead and blame business but they don’t know jack about software engineering. We determine which corners to cut as opposed to stating to business that security is just a part of doing engineering. We’re the one’s who decide and thus it’s our responsibility despite denials of people like yourself.