Security Has a Latency Price. Budget It.

Explicit latency budgets for controls: inspect once, exempt wisely, document the exceptions in milliseconds.

Security reviews die politely: everyone votes for safer, then the ERP preview crawls and the votes return. Price protection in milliseconds up front.

The each-is-different tax sheet

• EdgeACL/stateful inspection: single-digit microseconds. Free. Everywhere.
• IPS deep inspection: a real toll on big transfers; centralize it where the tapping hurts less
• TLS-break-and-inspect: pricey and operationally heavy. Spend only where credentials matter

Exempt out in the open

Exempt OS-update floods from deep scanning once they're vendor-signed at origin — a rule in the doc, not a shrug. Documented-bypassed with numbers beats folklore with grudges.

The punchline: budgets convert religious wars into spreadsheets. The insecure-cheap network and the sluggish-proofed one are the same mistake: unbudgeted tax.