> They are already in discussion with stakeholders regarding the emergency deployment of this fix.
You know a company is managed ineffectively when you can't even deploy security patches without talking to stakeholders. In any reasonably-managed company, stakeholders would only be involved with the press release announcing the issue (if at all).