I agree with your point in regard to company's disaster recovery systems. Management should consider all security factors in selecting their disaster recovery system and maintain it well.
I found it very interesting to learn that so many companies that have disaster recovery systems are fully aware that the recovery system has major vulnerabilities and operating errors. What then is the point of having the system if it could fail when you need it the most?
I think that you make an excellent point citing internal security as one of the main IT security issues of today. Employees have access to large amounts of important company information, what