premise: As a result, developing a comprehensive set of policies was one of their first steps in establishing an effective corporatewide security program.
hypothesis: corporate security cannot be achieved before developing policies.