The Computer Security Institute (CSI) Survey for 2008 has been published and can be downloaded from their web site.