With so much attention focused on security, and so many resources devoted to it, why are security skills coming up short? IT managers say it’s because the security landscape changes so rapidly, with the volume and virulence of security threats growing almost daily, that it is difficult for even the most seasoned security professionals to stay ahead of hackers and cyber criminals.

* Umm.. I haven't seen a lot of company which has so many resources devoted to security. Most of the time security is one of the understated and under-estimated part of the IT. Not a lot of companies, have procedure and policies to included their security department when deploying rouge server and other vulnerable stuff on their network.

* To stay ahead of hackers and understand the continuously changing security landscape; one should invest heavily on training, seminars, books and retention of good security administrators in your company.

* I always feel that security administration is like Medical profession, to keep abreast you ( just like Doctors ) have to constantly study and update yourself with the latest exploits, vulnerabilities and threats.