Security breach can be used to drum up anxiety and get support to fix the urgent issue. To succeed the message and actions must drop the anxiety drivers in favor of belief drivers. There is a balance to strike between getting attention and sustaining it without burning out our stakeholders. The aim is to change people’s negative perception of security to a more accepting stance. This is harder work than relying on something scary to make the point it is worth the trouble. If a CISO doesn’t believe why would anyone else?”]
Source: https://www.csoonline.com/article/2871765/building-balanced-security-support.html