A man sits on the grass and drinks from a water bottle.
A man drinking from a water bottle while picnicking.
As discussed in the previous section on risk analysis, the central security groups served primarily as advisers or consultants to the business units, and, thus, they generally did not have the ability to independently dictate information security practices.