Information Security must be balanced

Security in business is not an absolute. You can never be 100 percent secure and still be able to function as a business. For this reason Security needs to be balanced. It is about understanding your risks, mitigating those unacceptable risks and monitoring those risks that the business is willing to accept. The thing to remember is that if the business cannot operate security has failed. There is either too much or too little. Find the balance for your individual business. It is different everywhere.