Courtney’s Laws
Nothing useful can be said about security except in the context of an application and an environment.
Never spend more money eliminating a vulnerability than tolerating it will cost you.
There are management solutions to technical problems but there are no technical solutions to management problems.