Crypto-Gram Newsletter, September 15, 2008 Sep 17, 2008, 16 :01 UTC (0 Talkback[s]) (2349 reads) (Other stories by Bruce Schneier)
"Conversely, it shouldn't ignore problems that are costing it money when there are cheaper mitigation alternatives. A smart company needs to approach security as it would any other business decision: costs versus benefits."