Ask a room of engineers about their annual compliance module and you will hear the same story: a slide deck on data protection, a few multiple-choice questions, a certificate, and nothing that resembles the work they do on Monday morning. Yet many of the incidents that end up in a post-mortem start with a person, … [Read more…]