Premise: Such a rating system provides not only a measure of performance and awareness, but it also places primary responsibility for information security with the managers whose operations depend on it.

Hypothesis: This rating system offers a considerable improvement over the previous system.
Relation: neutral