Anyone who has tried to undertake a major (and even minor) change in an organization has most likely experience some roadblocks. In my experience getting upper management and other key stakeholders to understand why the change is necessary.  How many of you can identify with these responses from key management/stakeholders regarding change:

Cybersecurity needed to be a part of the business enterprise and not just an afterthought or complementary side-function. Since most businesses have a public-facing side and are reliant on organization and/or customer patronage, being able to protect their interests as well as the company's becomes a symbiotic effort underpinned by a solid cyber security strategy. Identifying key information assets and processes and devising the appropriate security apparatus around them is a best-practices approach to securing the most critical components.