CSO has an interesting article on Joshua Corman's 8 dirty secrets of the IT security industry. An excerpt:
Dirty Secret 8: Security has grown well past "do it yourself" Technology without strategy is chaos, Corman said. The sheer volume of security products and the rate of change has super-saturated most organizations and exceeded their ability to keep up.
"Organizations realize only a fraction of the capabilities of their existing investments. Furthermore, the cost of the product is often a fraction of the cost of ownership," he said. "There was a time when you could do it yourself."
The vendor community must therefore stop trying to convince companies that they can buy a product, set it and forget it.