Premise: These organizations establish a central management focal point, promote awareness, link policies to business risks, and develop practical risk assessment procedures that link security to business needs.
Hypothesis: The organizations work very hard to increase security options for businesses. 
Label: neutral