In conversations with industry contacts this past week, I heard the same thing: in many companies, information security is being absorbed into various business units.