In this episode, I am joined by John Davis from MicroSolved, Inc. We riff on techniques for developing modern security policies that users actually read, rational risk assessment, ideas for crowd sourcing policy/process management, and a bit of history.

Give it a listen and let us know what you think!