Nice Information Security Quote

National Security Agency (NSA) information assurance director Richard Schaeffer said that agencies can protect their systems against 80 percent of known cyber attacks by following three steps:

1. implementing best security practices
2. configuring networks properly
3. monitoring networks effectively

My bet is that people and processes fill the gap.