Should IT respond to security as if it was a crisis? Or is a methodical and measured approach best?Distributed by OneLoad.