You might be increasing cyber-risk by not actively working to reduce it. As a leader in an organization, you have a responsibility to act in its best interests.
Source: https://www.darkreading.com/risk/dont-get-stymied-by-security-indecision/a/d-id/1341217