“If I'm just being the IT network police, and I have to get [name of internal auditor] and he goes in there
with a suit and says here's why you don't want to do this. They usually just put their tail between their
legs.” — Information Systems Security Manager, Institution C.