{"Two years ago, companies didn't get it," he said. "Now, all the people I know in this business are hearing interest from all quarters."} Or they were not interested at all even when such risks were pointed out to them. (Personal Experience)

Very few organisations look at themselves from the point of view of the outsider looking to steal data, if they did they would not leave such huge holes in their procedures. Large organisation should run teams that constantly try to penetrate their own defences and devise ways to block any attacks in which they succeed.

While moronic accountants continue to see IT departments as profit consuming areas, whose spending needs to be constrained without consideration of the protective value of any given project, there will always be inadequate security.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11048/31732#31732