The problem of TSM is that it depends on a investment level and sychronisation that may be difficult to accomplish. Many organizations see security as their safety armour, not durable bones upon which they core all other business features. Investing too much on security will keep them incapable to contest with organizations that invest less, especially if the smaller remedy shows sufficient. And serious cautions of disastrous loss will not swing an professional who believes it's not likely to happen.