You can have strong security tools but still get burned without solid...
https://www.golf-bookmarks.win/you-can-have-top-tier-security-tools-but-without-governance-risks-slip
You can have strong security tools but still get burned without solid governance. Imagine managing 120 privileged accounts with no clear controls or a 7-day max temporary access rule that no one enforces