A few years back, while I was working for a large IT outsourcing company, I told to my boss that “there are two ways to handle security: intelligence and control.” He started laughing.