From InformationWeek’s Security Action Plans:

"How sensitive is a company about being on the front page of the paper?" asks Pete Lindstrom, founder and analyst at Spire Security. InformationWeek and others have reported on a rash of cases involving inadequate security and poor handling of customer data. "If the value of assets is high, companies should follow security best practices," Lindstrom says. "

and, in the sidebar, Lock the Doors:

"As companies become more forward-thinking about security, even that number may rise. "The attacker just needs to find one window in," says Pete Lindstrom, founder and analyst at Spire Security. "The security administrator must plug every door and window." "

Ultimately, both of these comments are pretty much cliche to security pros, but I do want people to actually think about the meaning behind the statements. For example, it is not clear to me even a little bit that enterprises are concerned about being in the newspaper for security compromises (name the last five compromised companies that hit the paper – how did it affect your impression of them? how did it affect their stock price? how did it affect the potential for future earnings?).