Some stories that may be of interest

Doiron, I beg to differ. A couple of years ago, I've worked in the EDC field (for clinical trials sponsored by various large pharmaceutical corporations), where live and production server farms where used by thousands of users. Security -is- an issue, and in many cases, EDC software actually calculates the dosage of the patient's next medication. Security is important not only to prevent people from stealing or accessing sensitive data, but also to prevent (malicious) manipulation or software failures because of security holes. The amount of QA in that field is a real nightmare and no fun at all. For example, you cannot install a patch without running and documenting full QA loops for the --entire-- system. But, as my senior management used to tell us: "Look at Contergan if you have forgotten why we are doing this."