“Good Security Governance” is not a Piece of Useless Consultant Jargon
For any organisation above a certain size, effective and efficient protection can only result from the layered application of protective measures at people, process and technology level. And in that order.