The greatest problem with using an objective or quantitative approach to the time-based model of information security is that...

		the model is only effective when used with low-level strategic analysis.
		reliable parameters for P, D, and R can be inflexible.
		developments in IT security make it impossible to improve the outcome.
		estimates of the time attributable to each parameter are difficult to predict.