Sounds like we're winning the war against apathetic managers, not against hackers

The article reads more like a victory against "reactive" managers who only pay for computer security after the fact, rather than against "hackers." This is good, but the article title is misleading.

We're also missing the numbers from prior surveys. What percentage of managers were reactive in 2005? In 2004? In late 2001? I'd like to see a trend in changing attitudes before declaring victory over hackers, managers, or anyone else.