Information is the lifeblood of organizations, a vital business asset in today’s Information Technology (IT) -enabled world. Access to high-quality, complete, accurate and up-to-date information is vital in supporting managerial decision-making process that leads to sound decisions. Thus, securing information system resources is extremely important to ensure that the resources are well protected. Information security is not just a simple matter of having usernames and passwords