I don't usually recommend reading the comments on reddit, but I think we as security practitioners should read the comments on this thread and reflect on how we can do a better job of collaborating, communicating, and delivering value.

https://www.reddit.com/r/sysadmin/comments/16uqyi1/does_your_security_team_not_want_to_be/

Does your security team not want to be responsible or own ANYTHING?

Password policy? No we don’t own that. Configuration hardening standards? Nope don’t own that. Vulnerability response process? Not us....

reddit

@accidentalciso I've been on both sides of the comments. When I was a newish SA team lead, I had a person from security operations drop a 50+ page printed report from his newly installed vulnerability scanner on my desk. He said "this is my proof that you don't know how to do your job." Needless to say, he never got much traction with my team.

Thankfully that was lots of years ago. Now that I'm running security for my org, I try to keep that jerk in mind as an example of how not to build a relationship with the ops teams.