premise: Although the latitude granted to business units varied, providing both policies and guidelines allowed business units to tailor the guidelines to their own individual unit's information protection needs.
hypothesis: Business units that are provided with policies and guidelines allowed for the tailoring of such guidelines to their own information protection needs.