I wouldn't say that there is any directive [from top management for information security]. I mean
obviously just they assume that it's going to get done. . . .I think there is a supportive attitude of it,
especially in concepts and I think that's true of not only the president, vice presidents, executive vice
presidents here and campus deans. In concept I see lots of support. Where we run into problems is in
implementation. The kickback there and individuals typically and then a lot of times that will get
escalated. Say well maybe we shouldn't do this. You know you'll see quite a difference in philosophy
when implementing security in the private sector compared to a public university. — CISO, Institution B