@SecurityWriter Have to be careful with 'told-you-so's' Most management sees these as 'smart-ass comments' and reacts accordingly.
Most management types are knobs that get their credit cards stolen and laptops crypto-locked on the regular.
So.... management types should listen to people that are actually technically competent instead of their nephew jimmy that "knows computers" because he found where all their emails went (usually the trash).
@Pjcoyle @SecurityWriter
If it were employees presenting this, you'd be right. An independent consultant will be fine.
It's so odd to me that, after hiring the best they can find, the corporate suits refuse to believe employees.