Mrs. Y on the reality of security practices:
The business of information security seems to be more about superstition than science. The CISO is just another slob who desperately wants to believe that some sexy, new technology will keep the Big, Bad Wolf of APT from blowing the organizational house down. Eventually, the inevitable intrusion occurs and the latest acquisition winds up on the dung heap along with all the other broken toys. But is it the fault of the product or unrealistic expectations?