Security is not a product, but a process

The mantra of any good security engineer is

“Security is not a product, but a process.”

It’s more than just designing strong cryptography into a system; it’s designing the entire system such that all security measures, including cryptography, work together.

Source:- http://blog.phpdeveloper.org/?p=565