I've said it before and I've come across a quote that prompts me to say it again. Peter McWilliams once said "We are all, right now, living the life we choose." The same goes for security..and privacy...and compliance....and overall business risk. The sum of our  business decisions up to this point define where we are with information security right now.