premise: Unlike many federal agencies, the central groups we studied had defined budgets, which gave them the ability to plan and set goals for their organization's information security program.
hypothesis: Most federal agencies had very crude budgets that would result in profit loss.