Necessary but Not Sufficient
Bruce Potter · IEEE Security & Privacy · 2010
Considering where the practice of information security started, the industry has certainly progressed over the past several decades. Forty years ago, only a handful of individuals understood the core concepts of computer system security. Today there are universities with degree programs in computer security, US federal mandates regarding IT system security, and a variety of industry-specific guidelines and auditing bodies.