The traditional risk landscape is undergoing material changes: the economics of IT security are now being driven by the attacker’s gain, not the defender’s loss. What matters increasingly is how much the bad guys can make from an attack relative to their costs (including the cost of being caught). All too often, the cost of defense greatly outweighs the cost of attack. Criminals choose e-fraud and identity theft because these are more profitable than drug trading.

Your challenge is to defend digital assets at a cost that does not threaten your own profitability.