I think you are right. Resources spread too thin is a major reason why intranet applications are hard to secure. I'd argue that if you can't secure a legacy app

I think you are right. Resources spread too thin is a major reason why intranet applications are hard to secure. I'd argue that if you can't secure a legacy application figure out some way to move to a SaaS and let someone else run it for you. Only run stuff yourself that you have the resources to secure. It is why I'm bullish on Saas, it is eating the intranet.