Whether it has to do with personal privacy or corporate information, it is safe to say that ignoring information security is at your peril. Although information security has been relatively well understood by security practitioners for many years, corporations, software product companies and even financial institutions have been surprisingly slow at taking appropriate information security measures and have more often than not treated information security as “nice-to-have” or a luxury.