Security professionals were surveyed using the Human Aspects of Information Security Questionnaire. Three research questions were asked and analyzed to determine issues and protocols used to protect sensitive information.