Tim Scott actually said...
You have to identify the baseline on the threats that you are going to address, and then you have to have plans in place to escalate your security programs accordingly as the risk increases.
03/14/2013