some of the worst trouble you can have is a security team that doesn't behave rationally or understand technology (speaking from experience :)