security managers know more about security than executives