More specifically, if it’s an organization, then the Information security staff has to dedicate quite a bit of time to handling data security breaches rather than working on something productive and creative.