The fact that baseline security concepts are still being ignored in favor for the latest greatest toy. Even rebranding of security concepts with things like Beyond Corp is still leveraging these same controls and gaps are not being closed. Inventory, secure configs, vuln mgmt, least priv.