Nice article. I think this article does a good job at articulating the complex subject of risk from an IT perspective for the CEO, CFO, and CIO levels.

Jason hits data loss, its occurrences and how to protect against it with proper policies and procedure within the organization. Many companies fail to properly secure their data at rest or in motion and as Jason pointed out, many have just a few of the components that are necessary to protect against data loss.

Data loss has enormous consequences and can happen to anyone, no matter how good the protection system is. Sensitive documents, financial records, contact records, address books, email messages and databases that organizations have created may disappear forever unless appropriate steps are taken as Jason outlined. The lost data is hard to recover, and it takes a lot of precious time and nerve-racking to recover even to the approximate extent the lost data was before the disaster. The value of data loss highly exceeds the mere cost of the hardware and software, and it can mean the survival of the company itself.

George Moraetes, CISM, CGEIT
Information Security Ececutive
http://www.moraetes.com