"Please stop putting a Major or Lt Col. (despite their devotion, exceptional attitude, and culture) in charge of ICAM, Zero Trust or Cloud for 1 to 4 million users when they have no previous experience in that field—we are setting up critical infrastructure to fail."
Past that, there are some other people who shouldn't ever get near cybersecurity management - legislators. Specifically the majority who are willfully clueless.
P.S. “Things so true they’re nearly physics” might be my favourite line this year.
The main problem is that this cost center does generate any revenue. Try to explain this to a CFO.
What's stopping the PM-but-really-Major from invoking chain of command and making overriding decisions? In an org like the military I'm not sure you could just say "please act like a PM and don't make broader decisions" to someone with seniority and expect them to not exercise their authority, unless you actually revoke their authority.
Or, what's stopping the Major from installing a friendly and symbolic tech advisor? Stranger things have happened than bureaucrats hiring and building departments designed to do nothing but legitimize and push forward their own agenda.