CISO & cybersecurity team spent months, years making and updating security policies, awareness campaigns to the employees about phishing
making employees do online mandatory cybersecurity awareness training & shitz
only for the top execs to be the one stupid enuff & almost causing millions worth of damages