Scanning tools, technical testing, monitoring platforms and automated alerts have become common across many organisations and, as a result, most are now able to identify vulnerabilities.  However, this has not translated into an equivalent reduction in the number of incidents. The problem rarely lies in the lack of…