Security is a Process
«So we say “security is a process and not a product” – meaning that we’re going to be discovering bugs in the software you’re depending on forever, and we need a way to fix those bugs when we find them. That’s why every computer you use bugs you all the time to update it with a patch from the people who made it.»
Cory Doctorow, Attack Surface.