JISC Information Security Policy and Culture Case study: Towards an institution- wide security policy Brian Reynolds, Deputy Director, Computing Services.