However, the financial services corporation provided the best example of how periodic reports of results can be used to hold managers accountable for understanding, as well as reducing, the information security risks to their business units.
These reports are painstakingly analyzed in the financial services corporation so they can have the best impact.