most organizations have no clue what security means. That's normal. :P