
W. Edwards Deming argues that IT Security is doomed for failure because it isn’t proactive. A reactive approach to this field will not work for several reasons, he argues. These reasons include the non-treating of IT Security as risk management, the lack of importance currently assigned to incident detection, and security measurement techniques.
Read the full article here: