It is surprising that thieves don't target data centres more often. All that expensive kit and copper is worth a pretty penny, not to mention all the data that's on it. Several BT exchanges have been hit, along with facilities owned by C&W. But of course, thieves don't always need to get in to wreak havoc: data centres can be ... The last time... ...an accountant told me how to improve security I almost split my sides in laughter. I showed him a screenshot of our network neighborhood where through his laptop and VPN we could see 1400 of the accounting firms internal workstations and servers. They had cryptic names like "BANKING" "PAYROLL" and "HRFiles". He shut up and left soon after. IT Security should be mandated by those who know about IT security and not a CPA who wants to pad out his bill for his annual corporate audit by telling us to change our passwords regularly. It should also be noted that there can never be a central IT security policy for everyone because A) no two organizations are ever the same and B) support from the executive branch varies by ego. Some execs get it, others are oblivious and look at security as an inconvenience that only applies to others. They are the worse threat to any security plan. I was once asked how to provide,... Insufficient. The traditional approach to security includes a step whereby anyone who worked on the system and the designer of the