Cisco has published their 2009 security report where they review existing security issues and try to identify some trends. Does this analysis fit with your experience or do you recommend changes or additions to this work? Read the Cisco 2009 Annual Security Report here.