IT Security and the Normalization of Deviance. Posted on January 16, 2016 by jgordon Link. Security is a cost center. Abandon hope.