The Adoption of Information Security

Should we see Information Security as a normal technology adoption and, if so, do we want to be laggards if we’re in an unregulated industry?