Security leadership operates on a "good enough for government work" philosophy, except it isn't actually good enough, and it is, in fact, government work.
Customer requirements — even the embarrassingly simple ones — go in like a memo and come out the other side as an existential crisis. Nobody knows why. Everybody's afraid to ask.
Raises and promotions follow a clearly documented meritocracy... of who golfs with whom. The "good old boy" pipeline runs faster and smoother than any actual IT system in the building.
Several senior/functional leadership relationships raise questions that an actual HR department would probably want to look into, if anyone could find one.
Org chart functions less like a hierarchy and more like a friend group with badges.
Accountability is theoretical. Like quantum mechanics, but with worse outcomes.
