Text: The organizations viewed information security policies as the foundation of their information security programs and the basis for adopting specific procedures and technical controls.
Entailment: Security policies are the foundation of those organizations' information security programs.
Contradiction: Those organizations seem to be clueless when it comes to security policies and correct procedures to follow.