Andy Briney's Information Security March 2004 column echos things I tell students in my classes. I point out that if all we needed to do was to secure the network, all we have to do is make sure that our network has no contact with the outside. The things that keep us up at nights and make our jobs interesting -- one hopes -- is the more difficult problem of securing the business, which he discusses. Further, the security manager has to be a "grown up" since he or she is up against this security axiom: There are few forces in the universe stronger than the desire of an individual to get his or her job accomplished. (See security axioms.)