* Mich Kabay looks at ways to use social psychology in the network security realm
* Consultants who know their limits are good to have.
* Prepare an action plan for the consultant
* Need to be conscious of what the consultants allegiance is with.
* Mich Kabay goes through the Center for Internet Security's metrics
* He comes up with maxims such as thanks for nothin' and ignorance is bliss
* Author reviews several references on security metrics.
* University professor sees a phish about his own job.
