Systems often fail because their designers protect the wrong things or the right things in the wrong way.

The fundamental challenge in the software industry is a knowledge gap about what "secure" means, how claims should be validated.