At its core, security is about enabling business in a risky world.
Security is a strategy of control by way of understanding.
It is the science of ensuring that a business platform has the reliability to economically deliver on business goals. Security is now meaningless in the absence of business objectives. The use of technology carries unprecedented business potential and risk. The companies that fail to understand the risk inherent in their business strategies will squander opportunities they would have otherwise enjoyed. Once you understand that security is a strategy-driven process that boosts profit by reducing risk, you recognize the prudence of developing a vision of how your security should be aligned with your business vision.