Security is a process, not a product.
Bruce Schneier (2011). “Secrets and Lies: Digital Security in a Networked World”, p.257, John Wiley & Sons

Security is a process, not a product.