You'd be surprised... I know most higher-up people, even the ones in tech who should really know better, still make very questionable decisions around digital security. Often totally in breach of policy they themselves introduced. And get away with it due to their leverage. I worked in IT a long time and it's been so many times that I saw the 'please turn off the annoying security restrictions for us, we're the bosses so we know better' coming around. They often have a huge security awareness gap: themselves.
Though to be fair: Most of us have that gap. I know I do. But they have the clout to override policy.
Don't expect someone to be sensible just because they're at the top somewhere.
Though to be fair: Most of us have that gap. I know I do. But they have the clout to override policy.
Don't expect someone to be sensible just because they're at the top somewhere.