Why information assurance is like teenage sex

A great quote from a document borrowed at Infosec from Dr J Philip Evans who runs the centre for research into information technology security at the University of Westminster:

"Information assurance is like teenage sex. Everyone thinks about it all the time. Everyone talks about it all the time. Everyone boasts about how well they are doing it. Everyone thinks everyone else is doing it. Almost no one is really doing it. The few who are attempting it are sure it shows how wonderful they are. In fact, they are fumbling their way through it incompetently, are not practising it safely but are trustingly confident - usually wrongly - that it will be better next time."

I couldn't source this to an original author unfortunately. Searching Google here at Infosec brought up some suggestions that would likely get me thrown out of the show faster than you can crack a WEP network.