[tracker1]

Doing nothing is always a valid business option... not usually a wise one, but always a valid one.

[topkai22]

Agreed, I'm not saying these bank CIOs should do nothing, just trying to point out the break even point between security and other factors can come sooner than we as technical people might assume.