Defining Reasonable Security in a World of Rapid Change