You get what you pay for.

Are you paying for a pat on the back and affirmation that you’re, “Doing ok…” with security?

Or are you paying for a critical look at your security with an aim to improve it?

Inspired in part be a Security Balance post.