Naturally, information security is on your mind. Every day, headlines and deadlines are built around it, and it creates loose ends and dead ends, risks and rewards. There is no way to secure information perfectly, but that's hardly an excuse. Regulations and liabilities stand squarely in the way of maximizing computing's spectacular advantages in productivity and cost-effectiveness. And everything changes so fast.

Security is one of the most difficult things for a CIO to get right. Spend too little -- or in the wrong way -- and the consequences could be disastrous. But with so many products and services on the market (many of which are extremely expensive), it is all too easy to run out of budget without delivering full protection. And worst of all, the threats keep mounting.

If you knew that burglars were operating in your neighborhood, that they possessed technology rendering the locks on your home useless, and that affordable lock technologies that provide better protection were available, what would you do? Most people would change their locks ASAP. But according to this month's CBR , many companies bring a different sensibility to bear when it comes to information security.

If you knew that burglars were operating in your neighborhood, that they possessed technology rendering the locks on your home useless, and that affordable lock technologies that provide better protection were available, what would you do? Most people would change their locks ASAP.