SecurityFocus has an interview with Marcus Ranum which details many reasons why network and computer security has not improved significantly in many years.

The most appropriate line for me is at the end: “Blame the IT managers who overrule their security practitioners’ advice and put their systems at risk in the interest of convenience.”