premise: Although we identified no organizations that had made significant progress in applying such measures, we found that more precisely measuring the positive and negative effects of security on business operations is an area of developing interest among many information security experts.
hypothesis: Many information security experts are more and more interested in measuring positive and negative effects of security on business operations.