under threat.
Also contributing to the problem is the fact that many organizations lack
adequate security programs fortheirinformation systems. Deficiencies include
poor management, technical, and operational controls over enterprise information