This report summarises the business impacts of breaches in security caused by malicious content, for example in terms of data confidentiality and loss of service, and considers how today's threats differ from their historical counterparts. This is largely due to a blurring of the edges - each potential security exploit may be due to a combination of techniques, exploiting system vulnerabilities, network holes and even human nature.

Just as there is no clear definition of the "problem", so the "solution" can be difficult to define. This paper explains why the only suitable security protection against Internet-based threats is one which provides a comprehensive coverage of known issues, and which is flexible enough to meet current and future needs. By understanding both the risks and the impacts, we can define what we need to see in any integrated solution.

As well as implementing technological solutions, there is plenty a company can do to minimise the risks of its IT systems being compromised. Technology can only be a part of the answer. This report considers what steps organisations can take to minimise Internet-based security risks. All organisations are different but some example guidelines are given here, not least to demonstrate that technology is only one piece of the puzzle.