Re: S2D2
They never will because financial risks are real to them and privacy risks are theoretical to them. Until they happen. I've seen my own employer just lip-service security until they wanted to purchase Cyber-Insurance and realized they would pay a high premium unless they actually did something.
Biting the hand that feeds IT
