Premise: These organizations establish a central management focal point, promote awareness, link policies to business risks, and develop practical risk assessment procedures that link security to business needs.

Hypothesis: The organizations focus on profits and investments.
Relation: contradiction