Security budgets were built to keep intruders off the network, and that model now has the priorities backwards.

https://www.securitymagazine.com/articles/102657-the-front-door-is-guarded-but-the-back-door-isnt-even-locked