Practical security guidance for IT Directors, not security engineers.

Straight, plain-language writing on compliance deadlines, incident response, insurance renewals and running security without a security team — no acronyms you'd have to translate for the board.