Tim Scott actually said...
You have to identify the baseline on the threats that you are going to address, and then you have to have plans in place to escalate your security programs accordingly as the risk increases.
Context
Scott emphasizes the need for baseline threat identification and security escalation plans.
03/13/2013