CIOs contemplate the vulnerabilities arising from VPNs