9. Get serious about security. "Resolve to have a full information security audit during 2009," Franklin also advises. The audit should include every application, job function, and individual that touches sensitive data, with special attention given to those touching sensitive customer data.

While IT focuses on its security, the industry as a whole needs to fix the security problems of the Internet, adds blogger Roger A. Grimes. "The Internet is quickly growing into the way the world works, and the criminals control much too much of it. It's time to start drawing a line in the sand and say, 'Enough is enough!' And take back our Internet."

InfoWorld resources: Top , tips for on security, blog, and .