Remember that the manager wants something accomplished in the staff's environment. Ask for staff members' ideas and the resources they will need to do the work. The internal employee is a manager's most valuable resource on security issues. He or she typically knows more about the system than anyone else does. The employee may not be an all-around expert, but he or she can at least help to coordinate the efforts of the change implementers with that of the support staff.
Employees can provide most of the answers that planners seek, so listen and take notes.
These employees live with the problems every day. Keep in mind that most of the great security ideas that the planning team has come up with have already been suggested at least once by someone whose life is now being shaken up. Like in politics, make friends early and often. A dilemma that too many IT professionals must face is admitting that they need outside help. Generally speaking, if your organization had the expertise it's likely that you wouldn't have security issues.