Never Worry About Security

by John D. Johnson Sept. 1, 2017 via Symantec

Security functions normally can't be put on hold, if the goal is to truly protect company assets: information, people, equipment, and property. The perception that security is always working requires a reality that security resources function properly at all times. Thus, absolute security is an illusion to help management sleep better at night. Getting the job done in the security field means implementing enough measures to reduce the potential risks. Any threat should find it uneconomical to expend its resources to penetrate or circumvent an organization's defenses. Just as the information flow of data on a computer network follows the path of least resistance to deliver its information to a destination, most threats follow the path of least resistance in trying to compromise an organization's data.

https://www.symantec.com/connect/articles/never-worry-about-security