In life and in business I truly believe there are no accidents, just bad choices. This reminds me of a Lexus commercial I saw a while back that touted how safe their vehicle was. The announcer said "The best way to survive an accident is to avoid it in the first place."Regardless of what you believe about accidents, we do have to look at information security this way. Such avoidance means being proactive and putting forth the effort to do what's right rather than wait until something goes awry. Funny how so many things outside of the security realm can be tied back to security.
While we're on the subject, here are a few bits I've written about computer security incident response in case you're interested.