Working with information security is to work in the borderland between IT and the remaining parts of the business. Technical solutions can achieve a lot, but in the end it is all employees in the organization who must understand and act in a secure manner that is the most important. No technology in the world can replace a good security culture. In order to establish a good security culture, it is necessary to understand the people, driving forces and KPIs that govern the organization. Getting to know an organization at that depth is what makes my job one of the most exciting jobs I can imagine!