Professor Gene Spafford's first law of security

Gee I hope this doesn't happen to anyone I know... ;-)

Yoran and Spaf's Law

"If you have responsibility for security but have no authority to set rules or punish violators, your own role in the organization is to take the blame when something big goes wrong."