Whichever
You are looking at the typical attitude of the person in his position which sees this as a non-essential, unpleasant and unwanted overhead instead of an essential cost to doing business.
Looks like he has not learned that in his business the uptime and reputation are everything and the costs to protect either are essential costs. Not unwanted additional overheads - they should have been budgeted and paid in _ADVANCE_.
So IMHO there will be more of the same here. It is only a matter of time.
Biting the hand that feeds IT
