Spending on security controls accelerates year after year but despite that, the number and sizes of breaches outpace that spending several times over. Are companies just throwing good money after bad in a world where nothing they do makes any difference or is it possible to actually build a secure organisation in the new digital world? This talk will identify the real reason organisations get breached despite having the best security controls money can buy and will discuss exactly what you can do to change the trend and improve your risk profile.