[rafaelvasco]

Management prefers to cut the cost of having to hire good security engineers, and wait for it to blow up first;

[cyborgx7]

I wonder if management just can't tell what is and isn't important, so they err on spending nothing until it blows up. Then they now this is something they might need to spend money on.