premise: Although we identified no organizations that had made significant progress in applying such measures, we found that more precisely measuring the positive and negative effects of security on business operations is an area of developing interest among many information security experts.
hypothesis: Measuring positive and negative effects of security on business operations is of interest to C-level executives.