anchor: These organizations establish a central management focal point, promote awareness, link policies to business risks, and develop practical risk assessment procedures that link security to business needs.
positive: The organizations handle business security.
negative: The organizations focus on profits and investments.