As an outsider, it’s often useful to observe an organisation for a time, to understand where the touchpoint are, a side effect of being onsite is spectating on issues that people often inherit, can’t see or have become lulled to overlook or ignore for a number of reasons, but usually priority, financial, skill or misunderstanding.

If security is a priority, it’s worth revisiting lost battles, to see what has changed since the last bout, and usually things do change, appetite, pressure, technology, skill and politics.