In the past thirty days alone, just counting the security funding stories I’ve personally covered, over $192 million has been pumped into security startups. Needless to say, security is hot right now and investors are betting that these new startups are not only going to be the ones responsible for protecting users and enterprises in the web, but they also might generate a buck or two or a billion.

But how can we really be certain that these new security startups are going to prevent future calamities? While their technology looks promising as online threats continue to grow and evolve, remember noted security expert and author Bruce Schneier’s famous saying: “Security is a process, not a product.”

You can be a company that has the latest and greatest security service (or multiple services) set up but if your company doesn’t have security as a key aspect of its culture