Information security is often an afterthought in organisations’ planning and spending. And as a subset of that, Governance, Risk and Compliance (GRC) struggles to get the high-level attention it needs. In this interview, Danielle Jackson, CISO at SecureAuth, explains that the picture is improving as security issues are more commonly represented at board level through the appointment of C-level executives with responsibility in these areas.