The best security organizations I've worked with understand and attempt to quantify the risk-management decisions they make on an ongoing basis.

Rather than setting a universally high security bar across all systems in the enterprise, an enterprise might segregate systems into different 'zones,'

There's also usually a black hat contingent at most mainstream security conferences. Since information security and hacking are two sides of the same coin, many hackers go to security conferences and many security professionals go to hacker events -- neither community seems to mind.

This helps to explain why trying to prevent the possibility of security breaches entirely is a losing battle.

For most organizations, the lack of a consistent risk management framework leaves a lot of important and timely information trapped in documents and in people's heads. Effective information management not only helps make business operations more efficient, but also mitigates risk. Most organizations are so busy just trying to manage structured information that they haven't yet addressed unstructured content -- much less given enough attention to litigation risk associated with information.

As a global leader in risk management services, combining our North American divisions and integrating our products across all lines of business further enhances our ability to provide even greater quality service and drive growth. Our customers will notice that the options and services available to them have been enhanced and that the new structure will provide access to all services from a single entry point.