The question is not if, but when. Don't question if you will need a computer security strategy; determine when the situation will arise showing you need one. Hackers, criminals, naive users, accidents, tired employees, acts of nature -- all of these can cause serious damage to IT systems and data. Failing to address security can lead to unnecessary risk and expense.