After two decades of software development, I switched over to cybersecurity and did that for about five years. My general impression is that while most companie

After two decades of software development, I switched over to cybersecurity and did that for about five years. My general impression is that while most companies would be happy to prevent data breaches, what they're really after is giving themselves a shield against legal liability. Because of this, they're far more concerned with having the appearance of security than having actual security. Being able to dodge charges of negligence appears to be what they're paying for. If they can reduce headcount by using AI tools, even if the tools aren't all that effective, that will be a business win if it still provides the same legal liability shield. Things might be different on the business secrets side of things but where I was on the PII/PCI data protection side of things, cybersecurity = legal risk management.