premise: Although we identified no organizations that had made significant progress in applying such measures, we found that more precisely measuring the positive and negative effects of security on business operations is an area of developing interest among many information security experts.
hypothesis: None of the employees or experts were interested in positive and negative effects of security on business operations.