Comment by elevation

Corporate security is best understood as a marketing function; compliance enables sales even if (especially if) it undermines genuine security.