Many authorities believe that 90 percent of all computer fraud acts are not prosecuted by the employer. What do you think accounts for this lack of prosecution? Discuss the importance of the establishment of a formal policy for taking disciplinary (or legal) action against security violations.