To acquire resources (personnel, hardware, software, etc.), you need budget.
This is probably the largest obstacle to any organisation’s Internet security program because you have to convince senior management that this security program has real value indeed.
Therefore you need to help them understand:
The importance of the security program and
The consequences of failing to address security problems.