Protecting sensitive information and critical systems is a balancing act, balancing constraints with operational effectiveness. This is the first in a series of articles that comprise and introduction to the Just Enough Security (JES) approach to information security. Application of the JES principles provide "reasonable and appropriate" protection...