🛡️ I can confirm this analysis from lcamtuf: How security teams fail

It’s relevant to why I put so much emphasis on cybersecurity strategy, principles, and communications.