Or that management will begin listening to their SME's about security once they see non-compliance raising their costs...one can dream