First of all, there is no perfect security. Moreover, very few people know how to build a complete soup-to-nuts internet-facing system that has "good-enough" se

First of all, there is no perfect security. Moreover, very few people know how to build a complete soup-to-nuts internet-facing system that has "good-enough" security at every level. The fact that there are few resources available on how to do this is an indictment of our industry. Even if your digital security model is impeccable, I'd wager a large share of these attacks involve a social engineering/disgruntled employee vector as well, which is vastly harder to protect against.