To Stop Phishing, Understand the Long Tail of Risk

Even though I’ve been analyzing malware for the past 20 years, I do understand that internet security is not merely a technical problem, but also a business problem. I agree that any company’s security expenditures should be seen through the prism of proper risk and return analysis. Security is, in this respect, no different than other investment choices a business must make.