The cost of information mismanagement is tangible and real. Leaks damage reputation, risk regulatory fines and penalties and need to be rectified often at significant cost. Information needs to be covered by fit-for-purpose security policies, and people need to be trained to follow them effectively. However, training and policy are rarely sufficient in their own right. People make mistakes an …[more]