Paul talks about when and why a CISO needs to stand up and say NO which takes courage, determination and a backbone. He advises security vendors to come clean with their agenda (selling product or service to retire their sales quota) upfront at any meeting, so they can have a honest conversation about solving a real problem.