Creating effective governance in information security

Talk:

• Throwing policies at the problem solves compliance, not security
• What we can learn from governments’ pandemic communication
• Policies should be the beginning of driving behavior change, not the end solution