It's easier to answer this once you've satisfactorily defined security, which will allow you to qualify "enough". I prefer this: "The process of maintaining an

It's easier to answer this once you've satisfactorily defined security, which will allow you to qualify "enough". I prefer this: "The process of maintaining an acceptable level of perceived risk." http://danielmiessler.com/blog/my-preferred-definition-of-security http://danielmiessler.com/blog/my-preferred-definition-of-se...