HKCERT, the Technology Crime Division of the Hong Kong Police and the Office of the Government Chief Information Officer have released their fifth annual information security survey. They conclude that information security in Hong Kong has improved, with more companies adopting advanced security measures. However, many companies, especially SME's are reactive, and companies should continue to improve not just the security measures they use, but also their security management.