We have to accept that our systems will never be immutable, but we can limit their mutability and increase our awareness to the changes that are occurring. Then, however, we need to know if a change is a good change or a bad change.
Source: Tripwire – The State of Security