Although business and technology drivers cannot all be predicted with certainty, they should be anticipated
reasonably and handled as efficiently as possible. Failure to anticipate key security drivers reflects an inability
to effectively react to changing business circumstances, which in turn results in diminished security and missed
opportunities for improvement.