Infosec quotes - prioritize projects

Harry Poster says “When prioritizing security projects, have you considered that if your end users still have admin rights, controls you may choose to put in place first could be shut off? ”