Making Information Security Policy Happen
Here’s a great podcast I did in 2008 with Julia Allen on why having targeted, innovative communications and a robust lifecycle are keys for security policy success – https://resources.sei.cmu.edu/library/asset-view.cfm?assetid=34450