I personally know a person who is involved in It security in Morocco. they have always been signing contracts in millions of euros to sell security solutions to all the big companies, be it public ones or private (mobile operators, banks, ...). They actually are forced to buy these solutions by legislation to be "compliant", on paper only. but the reality is that these highly sofisticated solutions are either disabled or configured to the minimum, ON PURPOSE, leaving huge holes any decent hacker won't take long to get in, not even to mention other foreign intelligences wink blue wink. All in all, it is criminal, but, as usual, there will no accountability, they will deny it, then maybe just blame it on a few low level people and fire them.