Insecure behaviours are continuing to proliferate and this is despite that cybersecurity breaches are regularly a newsworthy item on mainstream media and despite the fact that the advice given by cybersecurity teams hasn't varied much since the inception of this practice 20-30 years ago. As a community, we need to start asking ourselves, if the messaging on how to keep safe has been consistent, why is it not working?

Perhaps the real question here is, who is the real compromising position? Those on the periphery of security who are not heeding our advice?

Or is it security professionals who refuse to compromise, leading to workarounds and other dangerous behaviours?

Join me as we ask these very questions and look at ways we can build a stronger security culture in our organisations.