Security Assessment

Well, I just liked the little pictures... Anyway, this gives a good, brief overview of the security assessment life cycle, and it has a funny little hacker dude playing witha lock. What could be better then that?

http://common.ziffdavisinternet.com/...i=12290,00.gif

Or in Microsofts case skip step two and 2a altogether. Jump strait to step 3.

Don't they skip step 4a and 4b also? They kinda do a 4a1/2 when a problem is found, pretend to fix it and get back to 3 asap....