b'Since becoming Vermont\'s first CISO three years ago, Kris Rowley\'s been on a quest to create an IT security culture in state government. Rowley\'s latest initiative, bringing risk assessment in-house, is helping build that culture.'