U.S. GAO’s Gregory Wilshusen: Complexity and rapidity of change in IT environments make it more difficult for agencies to protect IT. The rapid pace of change – in business processes and technology – places increasing demands on IT security mechanisms to protect data on devices that are portable, operated remotely or shared with growing numbers of organizations and people. Agencies face the classic question of mission vs. security: “They tend to put more emphasis on mission,” expert says.”]
Source: https://www.cuinfosecurity.com/blogs/auditors-infosec-advice-ignored-p-1652