In such an environment, it is essential that (1) security specialists keep abreast of developing techniques and tools and the latest information about system vulnerabilities and (2) senior executives ensure they have the resources to do this.