Far more often these days risk management of computer use is presented in terms of quick solutions: a security “box” added to the hardware or a set of guidelines for company staff to follow. Little thought is given to the people risks and what motivates individuals to act as they do. This month The Report begins a major new series of articles on this unjustly overlooked topic. Contributors will examine the subject from a variety of view points. To open the discussion David Davies takes an overview of the risks involved, and identifies the reasons for the current state of apathy. Martin Smith then continues the analysis with some blunt remarks about the fallibility of traditional approaches to computer security which range from apathy and ignorance to excessive reliance upon technical solutions.