Truth has been spoken!

I see many companies spending millions as cyber security budget but when management asks what are the deliverables, no one knows what is expected out of it.