I feel like cybersecurity is a sham at a lot of companies. They’ll say they care but in reality don’t. Would anyone be able to share their personal experience?

Title: Disillusionment with Cybersecurity Practices in Corporations

In recent discussions about the state of cybersecurity within many organizations, a common sentiment has emerged: there seems to be a significant disconnect between companies’ professed commitment to security and their actual practices. Through my experiences over a decade in the IT field—across various companies that do not belong to the Fortune 500—I’ve witnessed first-hand how security often takes a backseat, raising questions about its genuine importance in the corporate world.

Reflecting on my current role, it strikes me that my position appears more symbolic than effective. My responsibilities feel less about securing data and more about fulfilling an insurance checkbox—an appearance of security without substantive action. It’s concerning to work under an IT director who lacks traditional cybersecurity experience, yet is ultimately responsible for critical decisions. This misalignment can lead to a culture where security concerns are not prioritized, despite any claims to the contrary.

While I benefit from a manageable workload and a comfortable salary, coupled with the convenience of working from home, I find myself in a state of ambivalence. I often propose proactive measures to enhance our company’s security framework and offer to take on additional responsibilities, yet these suggestions seem to fall on deaf ears. It’s a strange position to be in—where I could enjoy the comfort of my role, but instead, I feel unfulfilled due to the lack of emphasis on cybersecurity.

I’m curious to hear from others in the industry. Have you encountered similar experiences in your workplaces? How does your organization prioritize cybersecurity? Join the conversation and share your insights. It would be enlightening to understand if this is a widespread challenge or an isolated phenomenon.