premise: Several security managers said that by participating in our study , they hoped to gain insights on how to improve their information security programs .
hypothesis: The security managers un the study joined in order to see what we were doing wrong .