premise: Meeting periodically with senior managers to discuss the security implications of new information technology uses being considered.
hypothesis: Never meeting with senior management to talk about IT security implications.