The Security guy has no responsibility without authority.... his role exists because some regulation/best practice says it needs to exist and therefore it is cr

The Security guy has no responsibility without authority.... his role exists because some regulation/best practice says it needs to exist and therefore it is created. Security is almost always relegated to an afterthought and as a result you end up receiving an e-mail.