Information security is an economics problem
Social engineering bypasses all technologies, including firewalls.
People aren’t concerned with security breaches until it directly affects their lives.
Security is better when it's built in not bolted on.
Enterprises should emphasise security going forwad, and reward developers for secure code.