In the article, Spaf cited what he believes to be the top three information security threats companies will face: the deployment of resources without thinking through consequences, a softening of the network barrier, and an overreliance on a small set of suppliers for all sets of the market.

Spafford also offered solutions to these security-related problems, suggesting that companies must change their mindsets to acknowledge that their “whole enterprise is no longer an island, [but rather] an archipelago of islands that need to be protected individually, even down to the single-machine level.” According to Spaf, this mode of thinking must be adopted by each individual using the systems, not only IT executives. He stated that even company-issued laptops, once they have been off-site, should be subject to specific control measures.

Spafford said that many enterprises rely entirely on one OS or one piece of software. He suggested incorporating diversity into each infrastructure that is of critical importance in order to ensure that in the event of an attack, at least some of a company’s infrastructure will be maintained.