premise: After experiencing a significant virus infection in 1989, a retailing company assigned one of its managers to step up efforts to promote employee awareness of information security risks and related organizational policies.
hypothesis: Because the retailing company failed to promote awareness of security risks, it suffered repeated virus infections in subsequent years.