I'm curious if people have different views on this and why.
Update based on comments:
"Long-time blog readers should know that I don't rely on tools to defend my enterprise. I rely on people first, followed by tools, then processes", Richard Bejtlich
“The Enterprise Information Protection Paradigm,” Dan Geer’s [...] because it drives unification of people, process and technology.
"Surviving Security: How to Integrate People, Process, and Technology" by Amanda Andress