Comparing corporate fraud to network security

I agree with Richard, over at TaoSecurity, that "prevention eventually fails". It's a symptom of the arms race where the attackers are always ahead of the defenders.

A real-world example of this was the Blaster worm. Until that incident, the majority did not filter/block ports 135-139.