System hit was not protected by traditional best practices, used 3DES instead
Increased executive involvement and higher spending not enough, says study
