IT shouldnt own INFOSEC by itself. It should be the entire organization and driven by the people who do the work each and every day.

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.possiblaw.com