That's a good description. The invest a lot in highly secure technology and processes, and then ignore them out of convenience.

I work at a department that's all about data quality and integrity, and we have super bureaucratic processes to regulate access to data, but you don't want to know how much data lives in Excel files; an issue I'm constantly trying to address.