After experiencing a significant virus infection in 1989 , a retailing company assigned one of its managers to step up efforts to promote employee awareness of information security risks and related organizational policies .
One company had a manager attempt to inform employees about security issues after an extensive virus infection .