For over 20 years now, the enterprise IT security industry has built solutions around three simple concepts: Confidentiality, Integrity, and Availability. Entire product categories and methodologies have consumed hundreds of billions of dollars of R&D investment, and the industry’s best practices have matured into a robust set of frameworks and real solutions. The problem will never be “solved” but it’s no longer an anomaly for a midsized company to have an information security officer and at least some amount of skills and ongoing budget to defend the information assets from malicious or accidental compromise.