what we have here is a failure to communicate

tweeted by @areino

and the number one reason we still think of security as failing all the time is... the huge disconnect between the people who know security and the people who make decisions. they delegate responsibility but not authority and expect good things to happen.