Risk avoidance

Does it sometimes feel like your IT team is having this conversation?