The network in most organizations has a dramatically expanded attack surface. There is no longer a defensible perimeter that can fully protect corporate data, and so new approaches, technologies and practices are needed to protect corporate data and finances. This white paper discusses the results of an in-depth survey of security professionals in mid-sized and large organizations, and offers practical advice for improving security defenses.