Organizational computer security policy: The reality

Computer security issues are normally addressed from a technical perspective. Increasingly, however, organizations and computer specialists are coming to realise that applying more technology as the basis of an answer to a problem that derives from technology cannot, in the long term, be a viable solution. This paper shows how it is important that other considerations are taken into account, such as business and management requirements, and practical user issues. In order for this approach to make any progress, the current stiuation in ordinary organizations must first be established. This paper describes key results from research carried out to determine the status of computer security in organizations today.