Unlike many federal agencies , the central groups we studied had defined budgets , which gave them the ability to plan and set goals for their organization 's information security program .
The groups we studied had defined budgets .