Despite the constant stream of scare stories, the need for tighter security is still not an easy sell to senior management. But IT professionals know many of these threats are very real.