Don't do your own security. Prince also agrees that ISPs should provide infrastructure-level security, but warns they cannot be held completely accountable. ISPs should provide some types of security at the infrastructure level. The costs will be paid for by the bulk of subscribers. Ultimately, the responsibility for security lies with the people who know what the stuff is worth.
Companies are responsible for their own security, even when they outsource it.
Which is why when it doubt, filter that bad content out. Lisa Morgan is a freelance business and technology writer. Kenton County Public Library in Kentucky is not alone. Too many organizations are lax about security. They don't update their virus detection software, forget to delete old users or place blind faith in users' willingness to police themselves.