The story is that the IT teams are detached completely from the reality of their end users and are driven by compliance box ticking, off the shelf corporate malware sales marketoids, incompetence and ignorance.
Any attempt to confront anyone on that is met with defensive use of politics and budgetary concerns which don’t make logical sense at all. In reality the staff aren’t very good and can’t cope with the requirements of the organisation and this is being carefully hidden by the folk trying to protect their positions.
Thus we have several hundred people with inadequate hardware, inappropriate poorly configured software and friction so bad that doing an hour of productive work is a miracle. Of course corporate surveys that are sent out never address the concerns because that would mean someone has to be accountable for it.
At the same time IT teams are pushing BYOD for mobile devices because you can push a policy out which fucks the end user’s devices once a week and causes actual data loss on the personal side of things. So no one uses BYOD because it risks their own personal stuff and no one carries a corporate phone so no work gets done on the road.
The end game is I use my own hardware and do everything in clean room and push it to GitHub and pull it back into corporate env for integration.
The scary thing is I know enough people working at different organisations to know that this is the status quo. You can blame Gartner, Microsoft, the whole security sector and the army of solutions providers for mandating this mess.