¨Marketing – wants to
claim that he is either “the best” or “good
enough” (usually the latter)
–“the best” is a market
differentiator
–“good enough” lets customers check security off their due diligence list
¨Sales – “security is
like insurance: you don’t really want it but
you had better have it”
¨Indemnity – avoid
legal responsibility for vulnerabilities