My favorite quote, but only because I made it up:
If there is someone good enough to hack into my server to get my patient data, that person is probably not hacking into my server.
Another quote from an IT friend of mine on Experts Exchange:
1. Are there hackers out there good enough to hack into system? Definitely
2. Is there a hacker out there that will likely hack into my system? Doubtful.
