"As with conventional security, understanding infosec (information security) and developing a competence can be approached from a number of perspectives. Regardless of the approach, there are fundamental ingredients common to all protective programs. Of course, it is possible to defeat an unknown enemy. However, as plans go, relying on "winging it" is a potentially expensive proposition."