Complacency, or the belief that "good-enough security" is all that is required, seems to be the mind-set of many. Consequently, IT professionals may have settled for security that isn't always effective. In the 2008 CSI Computer Crime & Security Survey, 50% of the survey respondents reported that they suffered virus-based security incidents. The survey results also show that one in five suffered a bot attack in 2008. Virus security incidents have been the number 1 attack item for four of the past five years, placing second in the other year. Interestingly, in the 2008 CSI survey, 97% of the.