Yes. Current dingo CTO at work was grandfathered into the role because he was there long enough for the previous CTO to retire. We are very small. Now, this maroon gleefully incites using Micro$oft's AI as if it was actual mind blowing tech but consistently uses it like a search engine. Oh, and they haven't bothered locking it down. They "trust" Microsoft because "all of our data is there" and "Microsoft is certified to meet compliance" so we don't want to worry about it. lol

They believe that because on paper, because they are tacked on with "security officer" to their name, that somehow they can just wing cyber security and magically poof risk out of existence even when they are not performing any such ISMS functions day to day. They nit pick what they believe will affect the org but there are so may gaps and they just can't justify hiring someone to do the cyber stuff full time. We have no DLP but claim to be CMMC compliant. LOL