The University of SydneyPage 9Ten Deadly Sins of IS Security Management2. Not realizing that information security is a business issue and not a technical issue