Managers are given self assessment tools to help their operations be secure.
To help ensure that managers fulfill this responsibility, they are provided self-assessment tools that they can use to evaluate the information security aspects of their operations.