Recently I heard about a company who wanted their provider to pull their entire remote access security solution, and input VNC without any protections. While that alone is alarming of course, and I think they're working on finding a middle ground, the more alarming thing was the reasoning other than "its slow."

Two of the leaders of the company in question said that Cybersecurity was "fake news," "Hacking doesn't actually happen and hackers don't exist" and "Cybersecurity is just a way to make companies spend more money."

I'm not going to talk about where those mentalities come from, but I was truly gobsmacked. I felt like that family guy skit where Brian is arguing with the donkey about Kevin Bacon being in Footloose, where I'm just not sure how to combat those talking points?

What would you say to someone who believes those things? How would you "prove" it to them? Not that I really have to since its not a company I'm involved with, but it is weighing on my mind. We as professionals are always having to prove our value and show the impact of us working in the space, so learning how to communicate in these kind of challenging situations I think helps when justifying easier topics.

Genuinely curious how you would combat that type of thinking in your environments?