Or, take it for what it is, a quote from a movie. But don't dismiss the merits of the idea. It's essential Risk Management[0], which is most certainly a relev

Or, take it for what it is, a quote from a movie. But don't dismiss the merits of the idea. It's essential Risk Management[0], which is most certainly a relevant part of Information Security. Specifically, this is a form of Cost-Benefit Analysis (specifically, Qunatativie Risk Analysis[1]), a critical component in proper Risk Management; the reality is you cannot "fix" every issue. Take a look at methods like Single Loss Expectancy[2] and Annualized Loss Expectancy[3]; you'll find that the Fight Club quote is very close to the real-world methodology. I cannot speak for the Automobile Insurance industry, but given Insurance is founded in Risk Management, it seems likely to be closer to reality than not. [0] https://en.wikipedia.org/wiki/Risk_management https://en.wikipedia.org/wiki/Risk_management [1] https://csrc.nist.gov/csrc/media/publications/conference-paper/1999/10/21/proceedings-of-the-22nd-nissc-1999/documents/papers/p28.pdf https://csrc.nist.gov/csrc/media/publications/conference-pap... [2] https://en.wikipedia.org/wiki/Single-loss_expectancy https://en.wikipedia.org/wiki/Single-loss_expectancy [3] https://en.wikipedia.org/wiki/Annualized_loss_expectancy https://en.wikipedia.org/wiki/Annualized_loss_expectancy