premise: The groups focused their efforts on increasing everyone's understanding of the risks associated with the organization's information and the related policies and controls in place to mitigate those risks.
hypothesis: At this time, the organization faced a diverse array of security and data-related risks.