A large portion of those running PI-processing IT are simply not capable of doing so in secure manner. They have too many assets, with too many vulnerabilities, and are targeted by too many threat actors. The security industry seems to think that throwing more people at the problem is the answer, yet year after year we read about several million job openings that remain unfilled. This is a sign that we need to change the way we are doing business. The fact is that those organziations that cannot defend themselves need to recognize their limitations and change their game.”]
Source: https://taosecurity.blogspot.com/2019/05/know-your-limitations.html