Information security is based on the psychology of fear. Users are afraid that their systems get breached and developers are under pressure to fix a problem that requires time and more than one person to get it done.
The truth of the matter is that network security is costing millions of dollars a year, also because of the ineptitude of companies like Target that allowed intruders to steal the credit card information of its customers.
We all pay companies for security, but we do not even know what it really is and how it is implemented in our computers.
Another issue that makes security today very vulnerable is the poor software design. Companies are constantly under pressure to meet deadlines and very often their software has bugs.
On the other hand, companies will make a software more reliable only if they have a financial reason to do it. At this present chaotic junction, every security software company does not seem to get financial benefits from slowing down the software production and focus more on delivering a qualitative product.
Software companies that sell security are rarely considered accountable if a software fails to deliver what it has promised: it is always a mistake of the IT employee or consultant that, if something bad arises, is the one who gets fired.
It is time to change the approach to the security software and keep them accountable of doing the job they have been asked to do: IT people cannot keep up with viruses if the main product of the company fails to do its job.
The company that will offer a total refund of the money paid if the product fails to deliver what it is meant to do, will gain market shares and probaly will conquer the broken hearts of many customers who are still using Windows for their day to day activity.
Security is not an investment that provides a ROI: it is an expense that tries at its best to avoid other costs. Security is not about earnings: it is about the continuity of the productivity of the user. It is like a car insurance: you pay a premium and a deductible to avoid paying the entire amount of the liability if you are found at fault after having caused an accident.