That's what happens when "cybersecurity" is taken over by the management consultant class.