[yellow_postit]

If those companies have no way of updating their software what’s their approach to security?

[madmulita]

We simply complete the forms saying that we applied all the patches and upgrades that were necesary... and pray for the best. /s

[candiodari]

You could also point out that it mostly consists of not giving untrusted users access to internal stuff, like webapps would.