i am gonna be very blunt. you can show them all the numbers in the world and you can preach doomsday scenarios until you go blue in the face - you still have your basic same problem.

NO ONE CARES!

no one cares until it happens to them. no one cares until *they* get burnt.

let me ask you a question. how much extra life/disability insurace do you have? do you even have any? it's no different than a life insurance salesman trying to convince you to get extra life/disability insurance. he can show you all the facts, all the figures and all the worst case scenarios - you won't care. it hasn't happened to you!!

my point is - unless it's forced upon you by the goverment or police or something similar - you won't do anything about it unless/until you *have* to.

to make my case in point - car insurance. if it wasn't forced upon us and regulated - tons of people would be driving around without insurance - until the day they get into a crash and get seriously burnt financially. then they will go out and buy insurance.

today one of my clients demanded MSN be on their company computers. i told them it's probably not a smart idea to use that app in a business environment and it detracts from the enterprise security effort. they didn't give a rats ass.

all you can do is let them know about it and document it. the rest is up to them.