Author's Self-Rating: VV-T-BBB

In an article posted at The Security Catalyst website (click HERE), it looks like Ohio University is taking quick action, and spent over $750K so far in responding to a major failure of its IT department to secure the institution's infrastructure.

Two IT employees were fired, and the CIO left town - so to speak - by the time the dust settled. They may still have to spend millions more to update the security of their networks.

The bottom line is that there needs to be an alignment of security budgets with the scope of services your organization is offering. By spending all your budget on enabling services, without putting in appropriate security measures, you are at risk of losing all the good value you are creating.

Once you have an idea of what you want to deploy, in terms of products or services, you should have an independent review of the risks that come with them. You may have to scale back the planned features to allow for protection of the core value going forward. If you wait too long to implement security it will be overwhelming, and expensive.