IT security indecision

This article in a Canadian journal highlights the need to spend more of the IT budget on information security, and pay more attention to security awareness.
More security awareness links here and a paper on the need for security awareness here