So, I think that they [topmanagement] understand [the need to invest in information security] intellectually.
Whether they can practically and politically make the allocation decisions, I'm not sure, but time will tell. . .
The gap is pretty wide betweenwhat people expect and desire andwhat, at executive level, they can andwill
resource. But, my job is helping them understand the issues and closing that gap . . . — CITO, Institution D