bahareh navabpour - M.S Information technology management member of ITM Group, university of isfahan

Due to the gowing risk and value of information in most of organization , information security is becoming increasingly more important . Many theorists have pointed that the responsibilities of board members for information security to take effective security policies should not be neglected the purpose of this paper is to investigate the actions undertaken by directors and senior executives that pertain to their organizations information security. this paper also explores what factors influence thier decisions on the development and implementionof information security strategy.

Information security, security strategy, perception of risk , board members.