There are not a lot of interesting projects happening, so outside of learning technologies, the actual work we do is pretty mundane and boring. We spend about 90% of time in meetings, filling out forms for approval, getting firewalls updated, access requests, and plain appeasement and about 10% of our time actually creating and implementing. It seems that one really understands how these systems work so we are always having to guess, redo, and the projects just drags out forever.
I understand the value of the controls but it feels like the prevention is worse than the disease.
