Every issue features the publisher's editorial opinion on some topic relevant to security.
One would think that after a while, companies would get the big picture, and do the right thing. I'm not blaming security directors, although they should have the strength to make their company provide effective security. The problem is, when the company appears not to care, or even to be unaware of what's going on, then there's a spill down to the security people, who then tend to make some sloppy decisions concerning the application of their security tasks. If nothing happens, nobody notices. But all it takes is one incident to get everybody scrambling to find a good excuse for what happened.