After experiencing a significant virus infection in 1989, a retailing company assigned one of its managers to step up efforts to promote employee awareness of information security risks and related organizational policies.
One company had a manager attempt to inform employees about security issues after an extensive virus infection.
Because the retailing company failed to promote awareness of security risks, it suffered repeated virus infections in subsequent years.