What do you view as the single biggest barrier to good security practice in the modern enterprise? I see the single biggest barrier to be what it has been for some time: a failure on the part of leadership to recognize the value in a strong security program. Too many still see security as an expense rather than an investment. Good security practices can pay for themselves in return on deterrence, preparedness, resiliency, employee and investor/stakeholder confidence, and overall corporate/organizational value.
Check the rest of the interview. Short and to the point.