Reality check on my employer's security policy

Security-conscious software developer here - long in the tooth, grizzled and grumpy. I work for a pretty large software vendor with a few tens of thousands of employees and projects around the world. The company has an internal cyber threat group, runs annual security awareness trainings and even hosted an internal online "security conference" a while ago, with guest speakers from both inside and outside the organization. Some of the content was OK, if a little short on technical detail …

cybersecurity employer policy security security policy