Security: how much is enough? Everybody knows you don't say you don't need it, nor that you don't do enough about it. But security consultants stumble upon the same basic security gaps over and over. This list of 10 at this IT compliance site sums up what you should really take care of, and how to do it.