We led a Security Jujitsu workshop, in which participants identified security and privacy policy, and determined ways to 'sell' it to product management. Attendance was only around 10 participants, which we attribute to the way the session was promoted in the conference programme (a learning point). All participants engaged fully, and expressed satisfaction afterwards with the workshop.