I don't intend to imply that security products/services will address the problems inherent to badly architected/implemented IT systems.

Just that we can expect to see an upswing in expenditures for these sorts of tack-on products/services from CIOs seeking silver-bullet assurances from those naive about their corporate infrastructures' security exposure, or blame deflection, from those savvy about the same.

In other words, it might be a good time to start a white-hat IT security audit tools/services company.