What high risk things does your business do?

Internal Auditor here. I had an Audit Committee meeting today and our chair said verbatim “you should look into how the business-side is fucking [the company’s] security”. My company operates in an unregulated environment so we've always make security concessions to our business entities in the interest of accelerating profits. Our security team historically just maintained perimeter security and that's it. Never thought I would receive a blessing like this so I was taken aback. But also really excited at …

audit auditor business chair concessions cybersecurity entities environment high interest internal meeting risk security the company things today verbatim