• "How did we get breached? We ticked all the boxes!": the limitations of compliance-base security
• Identifying what security controls to apply and when they should be applied to reduce risk
• Transitioning to risk-based security, and levelling up your security awareness programme