My main message was (and remains)
- There is a dependency between IT and IT Security but not a strategic relation
- IT and IT Security are good neighbours but not good friends
- IT Security is one area competing for attention and funding, amongst many
- If you don’t make IT security matter, it won’t
- Focus on securing business processes not the process of securing
- •Excel is your new best friend - make your spreadsheets work with their (business) spreadsheets