"If you come calling us after the house is on fire, we can't really help you." - Jeff Moss, founder of Black Hat
Too often, companies ignore cybersecurity, thinking "we'll never get hacked." Others go through the motions to check the box that says they've covered themselves legally.
When they do get hacked, companies rarely go public about it. In effect, they have changed what "security" means by essentially ignoring the problem.
"Companies treat security like British rail," said Richard Thieme, a prolific writer and professional speaker on the impact of new technologies on society.
A few years ago, British trains had a horrible problem with lateness. So the rail association redefined "on time." Not surprisingly, on-time rates got better.
NEXT: Ballmer? Security? Really?