“You can't start it by having some exec saying, now we're going to have secure software, and writing a bunch of policies and handing them to everybody and saying, see, now we're secure.”

Transcript evidence from Brook Schoenfield — Security is a messy problem.