The Computer Security Institute (CSI) and the San Francisco Federal Bureau of Investigation’s (FBI) Computer Intrusion Squad released its 2006 report Thursday after surveying 616 computer security practitioners in U.S. corporations, government agencies, financial and medical institutions and universities. The average loss reported by respondents was $167,713, an 18% decrease over last year’s average loss of $203,606. Virus attacks, unauthorized access to networks; lost or stolen laptops and other mobile hardware; and theft of proprietary information or intellectual property accounted for more than 74% of financial losses, according to the CSI report, which can be downloaded from the organization’s Web site. Despite talk of increasing outsourcing, CSI said the survey results indicate very little outsourcing of information security activities, with 63% of respondents saying their organizations do not outsource any computer security functions.