The nature of the IT security job within most organizations is going through a subtle, yet critically important, transformation. Instead of trying to prevent things from happening that might jeopardize the security of the organization, security professionals are increasingly being charged with finding a secure way to allow thing to actually happen.

It’s been a long time in coming but it looks like security has finally risen to the top of the business agenda.

One of the core issues with security is that the quality of the security software deployed by individuals tends to vary widely. Some people don’t use and security software, while others opt to use free security software that may not be as robust as commercial security software. The thinking, of course, is that some security software protection is better than none at all.

There’s no doubt that social media as emerged as a major conduit through which malware is now be distributed across the Internet. What’s nice to see is that the owners of social networking sites are finally starting to do something about it.

One of the things that is generally assumed about IT security is that the bad guys are making use of some massive amount of IT infrastructure they invested in to send malware. In reality, a report from Agari, a provider of an anti-phishing cloud security service, suggests that real primary source of all that malware out there is systems that have been compromised.