You’re attending a management offsite workshop, and one of the round-table discussions comes to whether the organization should “do something different” when it comes to building systems information security and resilience in mind. Some of the more persuasive (and established) “thought leaders” in the organization are arguing that “we have the talent pool” that can design things right, build them right, etc. Mandating the use of formal methods, even ones that are well-regarded in the literature and in industry, is just not necessary, these coworkers say. Besides, they argue, almost every product line manager, division chief, etc., has her own needs, and fights for their own resources to build and modify their information systems;