Agencies will continue to “muddle through” until evidence of a massive intrusion becomes public. I hope that day never arrives, though, though. This will never happen. I can not see enough people supporting this tactic. Regardless of the merits of the approach, I can’t see enough support for this tactic, I hope it doesn’t happen. Agencies won’t be cut if they fail to meet requirements of the 2002 Federal Information Security Management Act, Davis said. Does Congress advocate cutting funds to poorly performing schools?”]
Source: https://taosecurity.blogspot.com/2005/04/cut-budgets-if-security-fails-to.html