The ideal state of security would be when a threat agent gets inside your domain, or gets access to your secrets, property etc., but it doesn’t matter.
Hoff kicked off quite the discussion on the Jericho Forum (follow up here with links to the blogs that discussed JF).
This slide deck (pdf), by Andrew Yeomans, [...]