| Abstract: | Top management’s attention to security tends to ebb and flow. In times of crisis (such as the highly publicized distributed denial-of-service attacks in February 2000), managerial attention and commitment to security are high. When the crisis passes and the media attention wanes, so does management’s focus on security. These brief bursts of concern followed by prolonged periods of passivity contribute to the languid performance by organizational employees to utilize effective security controls and practices. Maintaining senior management’s commitment to security is critical, for without the consistent support of top management, security will fail. |
