TY - JOUR AB - Despite its widely acknowledged importance, the information security policy has not, to date, been the subject of explicit, empirical scrutiny, in the academic literature. To help fill this gap an exploratory research project was initiated that sought to investigate the uptake, content, dissemination and impact of information security policies. To this end, a questionnaire was mailed to senior IS executives, in large UK‐based organizations, and 208 valid responses were received. The results of this research have indicated that, while policies are now fairly common, at least amongst the sample, there is still a high degree of variety in terms of their content and dissemination. VL - 11 IS - 3 SN - 0968-5227 DO - 10.1108/09685220310480381 UR - https://doi.org/10.1108/09685220310480381 AU - Fulford Heather AU - Doherty Neil F. PY - 2003 Y1 - 2003/01/01 TI - The application of information security policies in large UK‐based organizations: an exploratory investigation T2 - Information Management & Computer Security PB - MCB UP Ltd SP - 106 EP - 114 Y2 - 2024/04/23 ER -