Most corporations still treat anyone that is on their "corporate network" as trusted. VPN being used for remote workers generally, but endpoints are not well p

Most corporations still treat anyone that is on their "corporate network" as trusted. VPN being used for remote workers generally, but endpoints are not well protected at all, and you still gain access to various resources just by virtue of having the right IP address and being able to route to something. As a security engineer trying to get companies to invest more in Zero Trust type technologies where endpoints aren't necessarily trusted just because they have the right IP, it's difficult to get that mindset to change.