Damn straight, it's even worse than that though. Blue teams are behind from the start due to the nature of the security landscape. They are further hindered by

Damn straight, it's even worse than that though. Blue teams are behind from the start due to the nature of the security landscape. They are further hindered by misguided application of the "move fast and break things" method. You aren't supposed to break your C.I.A. and expose customers and everybody else to huge liabilities. Security needs to be baked into the infrastructure and IT management practices from the start. This requires enforcement, jail, and civil suits. Office of Personnel Management, Ashley Madison, Target and countless other retaikers, Dams and Pipelines and Water, Maersk, Linkedin, all these supply chain hacks and schools and hospitals across the country and the world. This has been going on for decades now, with no accountability at all. It just doesn't seem to be a priority. What in the hell are we doing? Why do MMORPGs have better security than the hospital??