Company under pays and under supports IT staff, protects users from IT policies, refuses to listen to concerns brought foward about security, and refuses to spend money to stay current with the arms race against hackers to pad the bottom line.
I'm not shedding a tear for anyone, this is just business.