Your IT department didn't choose it, I promise. Someone asked how to mitigate a risk, and the answer was spend money doing things well, or spend less money on

Your IT department didn't choose it, I promise. Someone asked how to mitigate a risk, and the answer was spend money doing things well, or spend less money on a CYA solution and pass the buck. That decision maker was promoted and since left for a new leadership position.