In this talk, Chris will trace back the origins of how policies are often incepted, how they can get out of hand, be slow if not impossible to update and measure compliance, and often lead us to the question of **is the policy helping or hindering**.
From this talk you'll learn how to use a software development pattern and product ways of thinking towards how your organization can manage policy; achieve continual updates to the policy allow the risk mitigations to move as fast as the risk does, and not get in the way and be easy to measure compliance.
