Risky business

Somewhere out there, an internal risk team and a vendor risk team are both very confident that "everything is fine.”

And they're right... if "fine" means spending countless hours debating the risk matrix, blatantly missing connections that expose your business to risk, and stewing up tension in team meetings.

New episode of Security Theater with @alexisgay