Having adequate knowledge regarding information security is
a prerequisite to performing any normal activity in a secure
manner. Information security knowledge, or a lack thereof,
could therefore be seen s a fourth level to an information
security culture that will affect each of the other three layers.