The Verizon DBIR team and partners put out yet another amazing DBIR report. One can grab their report from http://www.verizonenterprise.com/resources/reports/rp_data-breach-investigation-report-2015-insider_en_xg.pdf .
An interesting comment about the report "..
The executives "cut costs" by laying off engineering staff and supposedly outsourcing them. In truth they end up with lots and lots of critical infrastructure that is effectively unmanaged.
Their core infrastructure is breached due to a trivial exploitation of their lack of basic security hygiene, which is a direct result of point 1.
The executives responsible for #1 then pay a third-party consulting company big bucks to write up a report that absolves them of any culpability, to avoid lawsuits and terminations..."