The Ten Immutable Laws of Security Administration :
"As in the case of the immutable laws for users, the laws on this list reflect the basic nature of security, rather than any product-specific issue. Don't look for a patch from a vendor, because these laws don't result from a technology flaw. Instead, use common sense and thorough planning to turn them to your advantage."

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/columns/security/essays/10salaws.asp