I agree whole-heartedly. I’ve wasted many hours in security committee meetings. But then a CVE was discovered and we were able to respond in minutes. Earned our compensation 10x over with that preparedness, even if a lot of being prepared looked like downtime.