Navigating the security maze is also an issue. IT managers would like to get answers from the vendors, but they may not know which questions to ask. Hackers look to exploit these types of weaknesses and lack of knowledge in organizations. Maybe the front door is locked, but the back or side door is open. If so, most corporate networks are probably compromised in some way.
People buy tools after the attack, similar to the way they buy firewalls.
Worse, there is a skills gap. The rate at which a person can become and stay knowledgeable about security systems and malicious methods pales in comparison to the rate at which the industry is growing. People have to stay current, and that's tough. Vendors are also challenged to keep up. Avi Fogel, president and CEO of IDS vendor Network One, says hackers will always be more agile than vendors because hackers don't go through a quality assurance process.