Premier 100: What's the worst-case scenario for IT security?