Is this a good representation of how IT security prioritizations are handled IRL?
In addition, there is no way this person would interact with the dev team, PR, journalists, and data teams themselves. There are too many people giving input for a business of more than 10 people to go this sideways.