Testing, with test plans, criteria, procedures, and projected results Contingency planning - particularly for Y2K application program and system failures. Security Y2K fixes to security products and applications may be complete. But consultants used for Y2K remediation, for in-house applications, or by providers of systems and COTS software, create exposures. Vendors and customers ship code offshore to be renovated. They can be triggered any time, not just at year's end.
Security breaches are frequent at times of crises.
Nevertheless, there is a failure to sell the need to support security countermeasures. There is weakness in integrating changed applications into systems, changed systems into business units and into the enterprise - with insufficient testing at each level. Erroneous data passed from one system or business unit to another may remain undetected. Training Budgets are tight for Y2K endeavors and training reduced. But the most successful efforts recognize that new, complex tools and techniques require skills to assure meeting the mission.