presentations
Security Theater
TLS baseline example
PCI research
Mandatory Password expiration policies considered harmful