The issue is critical. A new survey has found that virus attacks, unauthorized access to networks, lost/stolen laptops or mobile hardware and theft of proprietary information or intellectual property accounts for about 75 percent of financial losses at U.S companies. While information security is not explicitly mentioned by Sarbanes-Oxley, it's clear that risk-assessment depends on a solid IT infrastructure. Many of you have discovered this, and you've no doubt been pitched a slew of products. The message is worth repeating from time to time. Article