premise: As discussed below, these efforts included testing controls, monitoring compliance with policies, analyzing security incidents, and accounting for procedural accomplishments and other indicators that efforts to promote awareness were effective.
hypothesis: Analysis of security incidents revealed that there was significant progress in minimizing securiy breach risk.