[johnnyAghands]

Ah ok, yeah.. unfortnutely this type of lag/mismgmt is pretty common once a company gets big enough. Often times the right people don't get involved on first-pass... even at tech-first companies like this -- though at that point perhaps you're no longer tech-first :/

[simonw]

Companies that get large enough to have a dedicated security team can often reverse this trend.