Most Critical Security Issues

According to Network Magazine - IMRB survey titled "Infrastructure Strategies 2003", those who invested in IT security or are planning to invest, the most critical security issues are 'Viruses' (83 per cent) and 'Internet Security' (50 per cent). Less importance is given to other security issues like 'Education of Users'. 'Internet fraud', 'Hackers', 'Remote Access Control'. While you are busy managing your firewalls on the perimeter, the attacks could come from within the organisation itself. Then there needs to be a proper incidence response mechanism in place. Incase a hacker gets through, or some employee manages to get hold of 'for the CEO's eyes only' information, how does the IS department respond to such a situation? Also, there must be a clearly defined set of guidelines for creating security awareness. All this calls for a well defined and documented security policy.

"The third most critical cause for non-availability of critical systems is due to malicious acts by employees themselves" Source : Ernst & Young Survey 2002.