What can be done right now (1)
Most important: education of staff and users. The „computer professionals“ must be able to follow the latest develoment in the field of IT-security; they should be in a position to configure the network, the servers and workstations properly and to identify possible security problems