Today I read a well written article about the California wild fires intitled, Why Californians Don’t Leave. The article discusses, as the title would suggest, why people do not move from wild fire prone areas even though the threat is repeated yearly. The basic theory of this article is so simple and applies directly to why businesses do not take information security threats seriously.

“Research indicates that if a threat hasn’t happened in our own cozy community, the human mind actually softens its threat assessment. Or worse, makes us cast a blind eye. “

I will not disect the article as I think the conncetion between wild fire and information security is an easy one to make. I suggest reading the article in full and it may help rationalize what seems to be illrational thinking.