(2019-01-10): risk management, corporate security culture, blue side, rants [00:20:06] we have policies that are written by security for security that no one ever reads let alone understands or adheres to. They've written like Ten Commandments thou shalt not share thy password. Why not. They never explained why