Mike Gillespie in Computer Weekly, ”What is the first step towards moving from a tick-box approach to security to one that is outcomes-based and how can an organisation test whether its security defences are delivering the desired outcome?” – read full story.