[editorial note: this article is part of a series that I am drafting to ultimately be included in a small guide to effective information security. I do not consider my views to be the final word, and am therefore soliciting feedback from anyone who has an opinion on my approach. You may either [...]