The measures for data protection taken by an organization reflect its awareness and attitude towards information and Information Technology. If top management treat computers as a de-humanized intangible, but necessary, evil the measures taken to protect data, individual privacy and data integrity would , at best, be lackadaisical.