You just can’t cut corners today. In fact you need to be very careful about even “optimizing” your security efforts because it’s so easy to misjudge what needs to be secured and what doesn’t; what deserves your attention and what doesn’t.

Today most Security Professions “get it” that endpoints are just as important as servers. But there are so many of them and there are so many more threat vectors on endpoints than on servers. How do we manage them all? For example, Flame has shown that Attackers only needed to infect a single system belonging to a low-level user and they had a chance to infect other, so-called “high-value” systems assigned to users with access to the information they wanted. So you can’t just protect your important systems because, well, they’re all important.