Information Security is "Like an Airport"

The traditional metaphor for information security is a house (or castle, or fortress). Parallels are drawn comparing doors and windows to holes in your network security and locks and alarms to how you secure your network perimeter and monitor and alert on unauthorized intrusions. In this ComputerWeekly.com article John Riley proposes a new metaphor: an airport. "It is no longer fashionable to regard security as a fortress to keep people out. The new analogy is an airport, where anyone can enter, but access to different areas is then strictly policed by a series of checks and controls.". IT security needs a new metaphor.