Compliance, IT security and a Clear Conscience

http://www.net-security.org/article.php?id=1050 "Shortcomings in IT policies can have potentially serious consequences. Research by Gartner has shown that 65 percent of all successful computer attacks take advantage of badly configured systems such as use of out-of-the-box default conditions, configuration of user accounts that have privileged rights, simple configuration errors or unscrupulous system administrators."