The first thing I teach new security awareness people is the importance of approachability. As much as we might like to think that line-of-business users will intuitively respect our expertise and will obediently follow our instructions, that just isn’t true.
DORA places technology risk at the heart of an organisation’s risk profile: challenging if operational resilience is split between different stakeholders