@silverwizard If 1/100th of Infosec was actually effective, ransomware would be a solved problem.
I swear to god, actual security is blocked by most infosec professionals.
Dealing with infosec costs most companies more than they ever stand to lose in an actual incident.
Outliers exist, but even then, I firmly believe that deploying sanity in lieu of more IDS/IPS/Wankerware would pay mad dividends.
In short: Stop wasting your money on security wank, and hire two extra peeps who can handle basic patching and attention to detail.