However, the financial services corporation provided the best example of how periodic reports of results can be used to hold managers accountable for understanding, as well as reducing, the information security risks to their business units.
Managers can be held accountable for the information security risks to their units by using these reports.