Security is not a product, but a process.
The best ideas often come from the quietest voices in the room.