This is pretty much true for any touchy subject where the mission (say infosec) isn’t actually aligned with org motives (say cutting costs at the same time as i

This is pretty much true for any touchy subject where the mission (say infosec) isn’t actually aligned with org motives (say cutting costs at the same time as increasing profits). The result is basically theater where doublethink and doublespeak becomes the norm, and to stick around you have to care more about the theater and the least onerous interpretations of the letter of any applicable law more than the spirit it was intended. See also [1] for a really pragmatic way of thinking about the realities of a sustainable safety culture [1] https://github.com/lorin/resilience-engineering/raw/master/boundary.png https://github.com/lorin/resilience-engineering/raw/master/b...