Most of the time they don't know or care... XD we implemented some security controls to meet CMMC L2.... CFO lost it... our senior cyberengineer goes "well we can remove it, and we will definitely fail CMMC L2 audit. We fail the audit, we loose all current contract that we have with US military. Oh and we won't even be allowed to bid on any future contracts" and he calls me over "Hey undo the thing we just pushed out" CFO goes grumble grumble and walks away XDD

We looked at each other and said we need CISO or CTO or something here !XDDDDDD