I just thought I would point out that out of three news items on the "EITPlanet.com: Security News" bar at the top of the front page here, two of three stories detail the loss of confidential information through backup tapes.

When will people ever learn that backup security is as critical as online security. Surely the information is just as valuable. Any reduction in risk associated with the information being offline would be more than offset by the increased risk inherited as a result of its newfound portability and small size.

I would think that any resonable vulnerability assesment would catch this. Unless, of course, the "professionals" behind this threat analysis are improperly trained or educated, or just simply doing a half-assed job.

Considering the value of the information people are losing, why aren't people either encrypting backup tapes or hiring Brinks-type agencies to move them? I would think that cost can't be an issue, given the millions spent on protecting information while it's online.

That pretty much leaves lack of foresight, incompetence, or laziness.