Premise: Similarly, as discussed previously, managers are looking for practical techniques for more precisely measuring the value of security controls and obtaining better data on risk factors.

Hypothesis: They want this information to determine what risk factors to work on first.
Relation: neutral