Senior Director of Security and Compliance at Vera Security (@VeraSecurity) Tom Conklin talks about the pros and cons of using bug bounty programs, the challenges of managing risk in smaller companies, and why user awareness training is an ongoing headache for security administrators.