SANS Top 20 unveiled CIOs and security executives are desperately playing catch-up with unauthorized users of IM and P2P clients, who are sharing music files and videos on company time, and with company resources.