Yes and all the things. But Nick was the guy responsible for all these things.

You really cannot have good security if the goal of your “cloud lead” is to ransomware you.

So yes - they did not have good security so they hired him to fix it :)