Forrester held its second Security Forum EMEA in Amsterdam on April 2 and 3, 2008, with 125 security and risk management (SRM) professionals in attendance discussing how to tackle transformation and achieve excellence in SRM. We asked many of these delegates about the issues that matter the most to them in performing their jobs — the challenges and worries that they face every day. The SRM professionals we spoke with are focusing their attention more on the internal threats to their information security rather than on those coming from beyond the extended enterprise.