Recently, it occurred to me that the security of most organizations is like a Tootsie Roll Pop. Hard and crunchy on the outside, soft and chewy on this inside. One bite and you easily get to the yummy center.
How many licks does it take to get to the crown jewels of your organization: your data?
Postmodern Security 