How do public administrations, private sector users and individuals perceive the importance of network and information security?
One of the major problems seems to be that people do not necessarily appreciate the need to actively ensure their own security until something goes wrong. Part of the problem is a lack of awareness of the security risks related to use of ICTs. Furthermore, some user groups (in particular individuals and SMEs) often lack the means and expertise to implement adequate security measures, or choose to ignore the risks and focus on the benefits of technology instead. They forget that their unprotected machines can make the whole network vulnerable! Businesses often do not invest enough in security simply because they do not see a clear enough return on their investment.
