Joel -- Good points across the board. Most of our problems with IO remain in the policy / permission / "lanes in the road" arena (what we may do) versus in the technology / TTP arena (what we can do). Because the first impacts so heavily on the second, it's policy that we really need to fix.

The concept of IO is simple: Control the other guys' view of reality, and don't let him do that to you. It's the execution where things really get tough.