When I joined the Enterprise Strategy Group (ESG) approximately four years ago, we had a burning suspicion that the storage layer of the technology stack wasn't very secure. Our day-to-day conversations with IT professionals reinforced this hypothesis, but that wasn't enough. Early in 2004, we embarked on a quantitative research project to compare our thoughts to real user data. Chalk one up for data and statistical analysis; this time we weren't just reading our own headlines, we were spot on.

ESG concluded that while the entire storage infrastructure was extremely vulnerable, one of the most ominous weaknesses was tape encryption. When enterprises (i.e., organizations with 1,000 or more employees) were asked if they encrypted backup data, only 7% respond-ed "Yes, always." A startling 60% of storage professionals said "No." This meant that the preponderance of data on tape was being carted to some offsite storage facility in cleartext, a proverbial accident waiting to happen.