Several years ago, a number of researchers began to realize
that many security systems fail not so much for technical
reasons as from misplaced incentives. Often the people who
could protect a system were not the ones who suffered the
costs of failure. Hospital medical-records systems provided