Jason's report concluded by emphasizing that computer security is primarily a management issue, not IT issue. Jason explained how management's attitude and philosophy about an are critical determinants of an organization's overall security. When top management considers computer security to be an integral part of the organization's processes similar to quality, security is likely to be more proactive and effective.