“So that's one thing that they include on annual goals, a lot of bonuses depend on compliance and passing
audits, being in compliance withoutmajor findings and deficiencies. It's got attention frombudget. So I'd say
the support is there and they embrace it.” — Information Systems Security Manager, Institution C