I found your list of 10 things that WON'T happen in 2009 to be right on target.

I think an interesting point to make is that (except for FaceBook) the list could be the same list as in 2002 when we were experiencing the negative economic effects of an earlier perfect storm (Enron, 9/11, and Internet Bubble burst).

All nine items were issues on my radar 7 years ago. Many of the issues deal with people, and it is amazing to me that after 7 years, our people stlll are our weakest link. How much money, time and energy has been spent on getting people more involved in the secure business environment? Enough? Too much? How can we accept these types of results after all these years?

Hopefully, the lack of money to spend on technology will help us focus more creatively on more social/personal means to educate and advance the security thought process of our people.

Excellent 10 list, this is the first ever list I enjoyed reading! Because it really seems realistic prediction compared to other TOP lists.

Tim correctly said that people will try to find creative ways for security awareness / consciousness. This will happen only with proactive organizations.