My security team gets blamed every time someone falls for a phishing email but we are not allowed to implement the training programs or technical controls that would actually prevent these incidents.
More people experience this than they realize.
You get blamed for breaches but aren't allowed to do anything to stop them.
“Where Are You with Technology — Cybersecurity Practice?”
If this sounds familiar, the Library can help you find the bigger picture.