William Wilsnagh, business unit director of technology services at NamITech, reflected on a rather alarming incident that had just occurred one of NamITech’s clients. A virus had hit the client’s network, resulting in downtime of a full day. NamITech had won this client a year previously, in November 2002 and the client’s IS security had improved greatly. But, for Wilsnagh, the virus incident highlighted the need to extend the scope of NamITech’s services. Information systems security was all about ensuring the confidentiality, integrity and availability of information.