Security Engineers / CSOs: what are your biggest frustrations at work RN?

As a security engineer/lead/CSO, are there any hard-to-change things that you feel could be affecting your org's security posture? If there are, which ones do you have the biggest issues with? (e.g. management not procuring the tools/services you recommend, difficulty getting people to stop using their birthdays or pet names for passwords :(, difficulty updating mission-critical software when they're outdated, etc).

If you feel your security posture's fine, are there any other elements about your day-to-day work that you wish …

change cso csos cybersecurity engineer engineers frustrations hard management org people posture security security engineer security posture services things tools work