The University of SydneyPage 26Challenges–Security primarily a management problem, not just a technical problem–Governance cannot be relegated to middle management–Leadership is always from the “top”–Org. culture must be conducive to secure, reliable operations–Easier to buy technology than change a culture–All security failure is process failure. All process failure is management failure