Security - Now more then even Internal as well as external

The most interesting part of doing security consulting in my experience is business owners worrying if the firewall is strong enough and of coarse industry standard still have flaws and exploits. I believe most are trying to lock the front door but leave the backdoor wide open, not to many thieves I have heard of use the front door if they want the DB?