In addition to providing resources, it is interesting to note that both the internal auditor and the
information systems security manager at Institution C made comments indicating that top management
played a critical role in shaping the nature of the relationship between the two functions: