I have the same feeling about my company. I think we are in a deep s..t, and that we have to find the whole. Our alerts are too clean, and that's not normal.
Being and insurnace company and haveing a lot of confidential data we should be more searched.
But... they are very comfortable they way things are, and are hoping that the tools will solve the problems (Arcsight, IDS, Firewalls, soon DLP)
I hope I will be able to convince them.