Increasing dependence on computer networks for storing, accessing and providing business information, both internally within a business and externally to customers and suppliers, presents increasing risks to an organisation's reputation and creates regulatory and liability issues. Furthermore, the costs of failing to mitigate the risks to and from IT systems can be huge, both through immediate effects on productivity and in the longer term through damage to the company's reputation. Technological solutions to IT risks do not take into account the people issues associated with the mitigation...