One of the most interesting findings from ZDNet's annual study of enterprise security is the degree to which organizations have matured with respect to implementing formal plans for defense. Take a look at the data on the percentage of respondent organizations that have a comprehensive security plan in place. In 2002, 49% had established plans, while one year later that proportion had grown to only 51%--not very impressive. But by 2004, 74% reported they had solid security plans enacted, a 50% increase--remarkable progress. So if your company has a formal plan in place, you're ahead of the game. If not, you may want to revaluate your priorities for 2005 and consider moving security planning closer to the top of the list.