Which is why you need someone who is responsible for IT security without also being responsible for shipping product. An asshole who can stop releases until security is properly in place.

My understanding is this bloke gets very quickly removed from Fortune 500 companies.

Which is why I am going to need a very large capacity popcorn bucket.