Organizations need a culture of security...

Great GCN article from Brian Robinson titled "Confidence: The secret sauce for security". My general interpretation of Brian's use of the word Confidence... translates to Culture. His opening few sentences say a lot... "Talk about security these days often focuses on technology -- the tools agencies can deploy to keep intruders out of their networks and systems or, if they do get in, to mitigate the damage from those intrusions. Very little discussion is spent on users and how important they are to that security."  I completely agree.  Just as much attention needs to be placed on the human aspect of cybersecurity as the technologies.