Almost every time I do a security maturity assessment I find that companies are the least mature in Governance.  The areas that seem to need the most attention are Policy and Compliance which is to be expected since that is the area we least like to focus on.  In this episode, Sarah O'Kelley from onShore Security and I discuss the differences between governance and leadership and how cybersecurity plays into the leadership and health of an organization.