In this thought provoking article Phil Kernick (Director of Technical Assurance for CQR Consulting) invites us to turn everything that we think we know about IT Security on its head. He reminds us that security threats are evolving together with technology and that clinging to the old fashioned notion of 'keeping the baddies out' could be very dangerous in the midst of the current trend towards distributed technology and information.