The advent of IT Consumerization, Personal Mobile Devices, and Cloud Services marks a significant change in our IT environment. They represent a disruptive change that will be as significant as the Internet, the World Wide Web, and e-mail. The impact to information security is a reality and its implication to both organizational and personal security and privacy are just beginning to be understood. The real time, mobile, always-on, social media-aware environment brings with it the new security reality of de-perimeterisation and the need to understand the context of use of information. The network centric, defense-in-depth approach that has served us well for so long is rapidly losing its relevancy. To provide needed security we need to shift the focus to a data centric security model. This will become more important as enterprises evolve into ISPs providing cloud-based services with specific mobile-based applications for information access. This presentation reviews my ongoing research that examined the risks to an enterprise that follow the introduction of personal mobile devices. My research looks at de-perimieterisation, context of use, security awareness, security policies, and security compliance in this post-enterprise environment. I made use of Importance-Performance analysis to prioritize risks and to develop of risk surfaces as a way to present the results in business terms to business leaders.