MORE BY DOING LESS

Summary from the TLDR InfoSec newsletter

Many companies think of compliance in terms of templates and generic checklists. These box-ticking exercises are high-effort, slow, and can cause teams to take compliance and security less seriously (or treat it as a nuisance).