We hope to make the point that CEOs need to be personally engaged in information security as a strategic issue.