In many companies, budget increases are earmarked for specific e-commerce offerings, and do not necessarily signal more spending in other critical infosec areas. Viruses are currently the top concern of security practitioners. This is different from years past, where hacking-related attacks were number one, followed by viruses. The fact that the survey was conducted a couple of weeks after LoveLetter hit probably has something to do with this. Securing Web and e-commerce services is the number one project for coming months.
Insiders continue to pose a more serious risk than outsiders.
Several types of breaches, including electronic sabotage, equipment theft and access abuses, increased since last year. Outsider breaches also grew, but represent a much lower threat overall. Companies with layered security defenses detect a far greater number of both insider and outsider breaches. The lesson being, you can't prevent security incidents if you don't know about them. Three out of four companies have security policies, but only one-quarter used a public standard or model when developing them.