premise: The organizations avoided having once-a-year, one-size-fits-all security briefings like those seen at many federal agencies.
hypothesis: Unlike federal agencies, the organizations did not have annual comprehensive security briefings.