Working in cyber-security, by any chance? Those usually get two sorts of questions from their bosses:
- when no cyber incident happens, "what am I paying you for? You have nothing to do" and
- when a cyber incident occurs, "what am I paying you for? You didn't prevent that".