I don't intend to imply that security products/services will address the problems inherent to badly architected/implemented IT systems.

Just that we can expect to see an upswing in expenditures for these sorts of tack-on products/services from CIOs seeking silver-bullet assurances from those naive about their corporate infrastructures' security exposure, or blame deflection, from those savvy about the same.

In other words, it might be a good time to start a white-hat IT security audit tools/services company.

But the targets are usually not so prominent. As higher profile attacks occur, people in related companies will start to worry if they're next, and start a spending frenzy to try and prevent it (it is, of course, doubtful any product they buy will do any good).