A couple years back, Forrester Research, Inc. found that Fortune 1,000 firms were spending less on security than they spend on coffee and soft drinks. Now, I guess it's still valid, even after 9/11.

How terrible this lack of security. This is mainly due to the ignorance of those people about the security threats or may be the don't care attitude. Also people think that attacks will not happen to them and even if there is an attack, they will be secure with their data.

As the policies of the company changes, at times, they can't incorporate those changes into their n/w security. That sometimes makes problems.