Measure twice, cut once: sound advice for infosec, too(securityskeptic.typepad.com)

http://securityskeptic.typepad.com/the-security-skeptic/2013/04/measure-twice-cut-once-sound-advice-for-infosec-too.html