In the IT Security area there seems to be this lack of belief in the old adage, It Can Happen To Anyone . Normally, before a company will get off their collective butts and do anything about their software security, they have to experience an incident.