Aggressive risk management is not a realistic risk management approach because it can turn out to be too expensive for the efficient operation of the critical infrastructure. The losses made in terms of reduction or disruption of civil liberties can lead to a situation where the public feels restrained from productive life. In the same manner, the economic disruption the nation will suffer as a result may be too expensive for sustainable economic growth. Risk management in homeland security should remain strong, but it must also remain within realistic levels.
On the question of whether all security vulnerabilities warrant a solution despite the cost, the best answer is that while this is desirable, it is not realistic. Correcting all risks and vulnerabilities will create new ones because it will eat up resources meant for other government functions. For instance, dealing with all cybersecurity vulnerabilities may hinder the country’s capacity to support projects such as low-cost housing. In turn, this will breed a new vulnerability by way of increasing insecurity and social instability. Nevertheless, it is an economic impossibility to solve all vulnerability problems since this will require infinite resources, which simply do not exist. In this sense, there must be a measured yet effective response to risks and vulnerabilities.