Does your company require you to take cybersecurity training annually but at the same time ignore or have no plan to fix significant security issues.

I feel very conflicted on this topic because I appreciate training but when a company can get breached by the unfixed/known issues, I feel like I’m wasting my time with these trainings.

cybersecurity cybersecurity training fix security security issues training