Embedding a security and privacy culture into your organisation will deliver a substantive reduction to the potential cyber risks that an organisation faces today – can you afford to remain exposed? Have you even identified what your exposure might be?