. . . "In order to maintain a good stating in this industry, I think there is a need to have an effective IT security policy." .