premise: Researching potential threats, vulnerabilities, and control techniques and communicating this information to others in the organization.
hypothesis: Potential threats have to be researched because they are vital information.