Experience is the best teacher of all. And for that there are no guarantees...
First I do not think there is any silver bullet to solving the technology side of the security equation.