I think the most important thing is to be honest and truthful.
Security is not a product, but a process.