An investigation into the relationship between the degree of awareness and the level of computer security within an organisation : case studies of 5 local companies

Abstract

Management techniques for the mastery of information security have not been moving ahead as fast as new threats. Information systems technology is increasingly outstripping the information security community's ability to control it. Though Singapore strives to be the regional information technology centre in the near future, it is noted that 60% of the companies did not have a proper computer security plan, while 40% felt that there was no need for a general policy to deal with computer security. Hence, there exists a need to inform top management of the implications and consequences of compromising the level of computer security within the organisation.