How boiling digital risk management into bite-sized exercises helps Larry Dunham evolve the university’s approach