We see the same pattern in almost every sector we work in. A firm recognises that vulnerability matters. Budget is allocated. A project is launched. Training is delivered to frontline teams. A policy is written and signed off. A vulnerability lead is appointed. Measures are reported to the board. On paper, it looks like progress. … Continued