The information security field is economically inefficient. This paper examines how it’s known that economic inefficiencies exist, and why the industry seems unwilling to address them. By understanding these issues, you will be more capable of selecting effective IT security solutions that align with your business mission.