Taxes, incentives, and regulations don't directly achieve the goal. If the real goal is a shift in company cultures across an industry, then there also needs to

Taxes, incentives, and regulations don't directly achieve the goal. If the real goal is a shift in company cultures across an industry, then there also needs to be well-informed communication. Incentive structures can be part of that communication[1]. But people don't obey incentives unless they keep those incentives in conscious thought. If incentives were all it took for organisations to pay the cost of changing priorities, then there would have been no value in naming a bug "Heartbleed". https://www.kalzumeus.com/2014/04/09/what-heartbleed-can-teach-the-oss-community-about-marketing/ https://www.kalzumeus.com/2014/04/09/what-heartbleed-can-tea...