I work in a regulated industry and I try to keep all problems as open and widely known as possible. There are others who like to keep everything secret which h

I work in a regulated industry and I try to keep all problems as open and widely known as possible. There are others who like to keep everything secret which has led to known problems not being fixed for a long time. I am just a small engineer but this strategy seems to have worked in my small area. We are finally following industry standards, pentesting gets done (some people still resist though. They think it's better not to know about problems) and in general things don't get ignored anymore.