8 Dirty Secrets of the IT Security Industry

1. Vendors don't need to be ahead of the threat, just the buyer
2. AV certification omissions
3. There is no perimeter
4. Risk management threatens vendors
5. There is more to risk than weak software
6. Compliance threatens security
7. Vendor blind spots allowed for Storm
8. Security has grown well past "do it yourself"

Reference

• http://www.cw.com.hk/content/8-dirty-secrets-it-security-industry