What people like the author of this piece don't get is that security isn't the end goal. The job of an IT professional is to insure the availability, usability

What people like the author of this piece don't get is that security isn't the end goal. The job of an IT professional is to insure the availability, usability, and safety of services to his or her users. Security is a very important part of that, but you can't let it stifle your users' ability to do their jobs.