4
z
Management
y
We are doing far worse than best practices make
possible
y
We must change market incentives – for example,
by becoming able to quantify security, and by
shifting liability