mnli premise: Results can also be used to hold managers accountable for their information security responsibilities. hypothesis: Audits keep managers on their toes so that information security is always a priority.