Security by design and spicy awareness are complementary ingredients for an effective enterprise information security governance

• We implemented an enterprise wide information security governance inspired on ISO 27000
• Integrated controls and safeguards are used, but they are not perfect to protect against current cyber threats
• Involving and engaging employees , suppliers and stakeholders can reduce these security risks

We will show you some of our spicy awareness campaigns that have helped us and give you an insight in the lessons learned.