> Why hasn't it been eliminated or reformed by now? Because of the way large bureaucracies work. For one, a clearly defined role of prevention means that false

> Why hasn't it been eliminated or reformed by now? Because of the way large bureaucracies work. For one, a clearly defined role of prevention means that false positives are essentially not a concern. Second, rigid promotion and pay rules limit rewards and thus incentives: the old "work only so hard not to be fired" ham. Still, people want to try. But it seems risky to do something different, and if I'm different and it goes bad, then it's obviously my fault. So we'll just keep installing more anti-virus programs and x-ray scanners. At least then we have something to count, and quantifiable bullet points always look good on annual reviews.