The best security tools and practices won't protect the business if they're not used consistently. Policy is how things get done. It's an expression of the busi

The best security tools and practices won't protect the business if they're not used consistently. Policy is how things get done. It's an expression of the business' values and priorities. Even if it's just "all employees must install the authenticator app or request a Yubikey otherwise the cyberinsurance will drop us."