We have many people who purport themselves to be cybersecurity "experts" who have no professional training in INFOSEC and Information Assurance.

They don't understand the interrelationships between Cyberwarfare, cyberintelligence and cybersecurity. They scream about how these things have to be separate silo's with separate power structures, when in fact, they have to be strongly integrated.

Usually these people are strongly tied to business interests who do not want any oversight over their business processes and oftentimes corrupt business practices. Oftentimes MBA's with no training in IT much less in INFOSEC or Information Assurance are making National Security decisions base on their individual economic gain. In most cases you find these business "process" managers don't want any oversight over the less than stellar lack of risk management and oversight of what they are doing.

Had they had proper Information Assurance Governance, Risk Management, Compliance, Auditing and Counterintelligence measures on the mortgage, banking and credit industries, these excesses of the lack of risk management would long have been seen and corrected. You would not have this economic disaster we presently have.

For INFOSEC, is effectively risk management or people, processes and technology. And that means in the area of people, the lack of control over risky and pure management theivery that has been going on within US Corporations would be controlled.

This is what is meant by Accountability and Transparency. Corrupt business elements would no longer be able to instill risk into systems without oversight from Information Assurance and INFOSEC experts.

So when you hear these false claims of security not extending to the business community for some reason or the other, it is only self serving. To manage risk, you have to have third party independent individuals do it. Much like CPA's do this in the financial industry today.

This is the scientifically managed (ie Management Science) enterprise of the 21st Century we are building. The days when a gang of individuals in suits can feel entitled to commit fraud on a massive scale as has been done in the mortgage industry, is over.

Middle level management are going to be replaced by risk management and decision support systems where engineers and analysts enter data and executives read the output. No middle management. No need any longer, they are being replaced by computer systems.

And these systems must be free from outside contamination due to lack of standards and best practices, what MBA"s call "leverage", how you can completely steam roll your clients as is being done in the mortgage and credit card industries. Where companies constantly breach contracts- change the terms of the contracts, without agreement from both parties. This illegal behavior by business is unconscionable. The independent control of secure computer systems and the regulation are a result of the mismanagement by business in industries that failed to exercise due diligence and exercise fiduciary duty to their shareholders.