Another interesting observation of this study was that most of the IS users are not aware of the ICT related risks or the IS security measures. For ex-ample to the question regarding to which extent they consider as a risk (from 1 to 5) the inside of the company attacks and the outside attacks, the respondents gave only 37% grades of 4 and 5 to the inside attacks and 31% to the outside attacks