A New Way to Think : Review

There are parallels here to information security, or any central risk function, in terms of thinking who your customers are. Is it the shareholders (and Board as their representatives) to reduce the risk of losses? Is it executive management both for loss reduction as well as enabling and supporting business growth or mission success? Or is it the

... See more

In our security world we are often seeking to change behaviors and so we need to pay particular attention to the prevailing culture so we can use that for amplification, or at least so that it does not inhibit any necessary changes we want to make. But in all cases what we need to do is create personal changes of behavior that are supported at the

... See more