It’s difficult for security teams to get executive buy-in to address the problem because measuring and improving AD security is challenging. There are several reasons why.
https://www.securitymagazine.com/articles/96245-how-to-convince-the-c-suite-to-buy-in-to-active-directory-security
