http://blog.tenablesecurity.com/2009/03/ranums-rants-the-anatomy-of-security-disasters.html

highly recommended read for anyone dealing with security and PHBs. This is by http://en.wikipedia.org/wiki/Marcus_J._Ranum