Managers are on their own when it comes to self-assessment and security.
To help ensure that managers fulfill this responsibility, they are provided self-assessment tools that they can use to evaluate the information security aspects of their operations.