I have 40 year experience in developer, systems and security.
The real problem comes from the top. Upper management, CEO, CIO, CFO do understand risk and don&#x27;t understand technology. To them, security wholes are just bugs in &quot;the code&quot; or product liabilities in products used.<p>More then once I showed management they had a life ending bug. (Little Johnny drop tables) and was fired for being the messenger.