The 2013 IBM Chief Information Security Officer Assessment identifies a few areas of weakness, including BYOD policy, in modern IT security.