“The reason infosec is not taken seriously is because we can’t map risk to money. Until then we’re scary magicians with attitudes.”

This is a recent tweet from Daniel Miessler, an information security practitioner and writer who lives in San Francisco.