Too many of the companies out there seem to be playing loose with security and our data.  Ok, the software they are using in most cases is flawed but there's no reason not to have a robust patching and security policy in place to minimize the risks.

I give regular briefs to the users in the company I work for (as an information manager) stressing about the need for data protection, good password policy and the rest of the good stuff that they should do.  I've had a user come up to me after one brief and ask if it was possible to bypass/remove the encryption on his works laptop as it made it 'run slower'!!

All the high profile hacks going on at the moment and things like the bigger fines that the Information Commissioner is slapping on data protection breaches in the UK is giving me good ammo when I go out and preach to the unwashed masses

*disclaimer* Although the attacks are illegal and break the "ethical grey hat" rules of no disclosure.../*disclaimer*

When you preach this is an imminent risk, you need to be prepared, for God's sake please listen to me and then those risks are realized, it does make you feel a little better.