Meeting periodically with senior managers to discuss the security implications of new information technology uses being considered.
Never meeting with senior management to talk about IT security implications.