0 notes May 14, 2008 business projects have the advantage of potentially generating income, whereas IT security simply has “nothing bad happening” as the goal