Well if people took basic steps to keeping data secure then there wouldn’t be this issue. The problem still lies in the majority of users are just dumb, can’t spot obvious scams and phishing attempts no matter how much you try to educate them.

Don’t like the overload of security tools, stop clicking random crap in your emails and replying to obvious scams…

My scrum probably spends easily 60% of its points on remediation. We used to get functional changes deployed but now it seems like its all reacting to a scan.