Is single security vendor the right approach?

There has been a white paper circulated by a well respected security company promoting the idea of a single security vendor.

There are two major problems with this approach.

First and foremost i like to suggest that any security system that is reliant on a single source of code, regardless of its origin, is inherently weak. For in the final analysis if a workstation is compromised then such that weakness is more likely to compromise the whole infra structure than multi vendor approach.

Hence the reason for decades the aviation industry regularly uses multiple code and even different CPU structures.

Secondly if this was meant to be a marketing exercise then it is a poor own goal. For if such a premise was held to be true then why should any company choose any vendor other than Microsoft, Apple or IBM of this world?

What do you think? Do you rely on a single vendor for the security of your infra structure?

There is a need to reduce the cost of over all management of security systems but that is a different issue to the underlying technology.

The former could be achieved through establishing management standard and protocols for exchanging information.