This article is an excellent look at the common misconceptions about security and how to achieve it.  Anyone that is interested in computer security should read it:

 The Six Dumbest Ideas in Computer Security