Here’s a powerful information security-related quote that underscores many of the challenges we face:
“Some men have thousands of reasons why they cannot do what they want to, when all they need is one reason why they can.” –Willis R. Whitney
Is your management on board with security or not? They’re either part of the solution or part of the problem. It’s up to you to take the appropriate steps to convince them that information security is better than the alternative.