Is it If or When we get hacked? Spend resources or "Things Get Complicated"

Over at Oversitesentry (my blogsite) I have created a new shop with Templates and my books. This latest discussion is about the importance of creating a program that is based with a security policy since the adversary has a say in how you operate your business.