Why should security be based on business requirements rather than fear?

Question

Accepted Answer

Security designed around fear:


Over-restricts users


Reduces system value


Security designed around real business needs builds trust and supports adoption.

Why should security be based on business requirements rather than fear?

Answer with Explanation