Mike talks with Brett Galloway, CEO of AttackIQ, about the disconnect between the effectiveness of security controls and the funding of the security program. They also discuss how ransomware has changed the economic calculus of security funding and touch on the parallels between quantifying marketing and security controls effectiveness.