Chapter 1: Making informed decisions about security and protection